EUVD-2025-18734CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of the file hedwig.cgi. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Analysis
A critical stack-based buffer overflow vulnerability exists in D-Link DIR-815 firmware version 1.01 within the hedwig.cgi module (function sub_403794), allowing remote attackers with low privilege access to execute arbitrary code with high impact on confidentiality, integrity, and availability. Public exploit code is available and the vulnerability may be actively exploited in the wild, making this a high-priority remediation target.
Technical Context
The vulnerability is a stack-based buffer overflow (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer) in the hedwig.cgi web interface of D-Link DIR-815 routers. The affected function sub_403794 fails to properly validate input boundaries when processing user-supplied data, resulting in stack memory corruption. D-Link DIR-815 is a wireless router commonly used in enterprise and home environments; hedwig.cgi is a CGI script handling device management functions. The vulnerability affects CPE: cpe:2.3:o:d-link:dir-815_firmware:1.01:*:*:*:*:*:*:*. Buffer overflows in router management interfaces are particularly dangerous as they operate at system privilege level and can lead to complete device compromise.
Affected Products
DIR-815 (['1.01'])
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today