EUVD-2025-17618CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
A vulnerability was found in D-Link DIR-632 FW103B08. It has been declared as critical. This vulnerability affects the function do_file of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Analysis
Critical stack-based buffer overflow vulnerability in D-Link DIR-632 firmware version FW103B08, affecting the HTTP POST Request Handler's do_file function. An authenticated remote attacker can exploit this vulnerability to achieve arbitrary code execution with full system compromise (confidentiality, integrity, and availability impact). Public exploit code is available and the affected product is end-of-life with no vendor support.
Technical Context
The vulnerability exists in the HTTP POST request processing handler of D-Link DIR-632 network equipment, specifically in the do_file function responsible for processing file upload or file-related POST requests. The root cause is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), manifesting as a classic stack-based buffer overflow. This occurs when unsanitized user input from HTTP POST parameters is copied into a fixed-size stack buffer without proper bounds checking, allowing an attacker to overwrite the stack frame including return addresses. The affected component is the HTTP daemon (likely uhttpd or similar embedded web server) running on D-Link DIR-632 routers, which are SOHO-class wireless networking devices. The CPE would be: cpe:2.3:o:d-link:dir-632_firmware:fw103b08:*:*:*:*:*:*:*
Affected Products
DIR-632 (['FW103B08'])
Remediation
Primary: Discontinue use and replace affected DIR-632 devices; rationale: Given end-of-life status and critical vulnerability, replacement with a current, vendor-supported device is the only reliable mitigation. D-Link will not provide patches.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today