EUVD-2026-13702Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was found in D-Link DIR-513 1.10. This affects the function formEasySetPassword of the file /goform/formEasySetPassword of the component Web Service. The manipulation of the argument curTime results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
AnalysisAI
Remote code execution in D-Link DIR-513 1.10 via stack-based buffer overflow in the /goform/formEasySetPassword endpoint allows unauthenticated attackers to achieve full system compromise through a malicious curTime parameter. Public exploit code exists for this vulnerability, and affected devices are no longer receiving security updates from the vendor. An attacker with network access can execute arbitrary code with high privileges without user interaction.
Technical ContextAI
This vulnerability affects D-Link DIR-513 wireless router firmware version 1.10 (CPE: cpe:2.3:a:d-link:dir-513:*:*:*:*:*:*:*:*), specifically within the web service component that handles administrative functions. The root cause is a CWE-121 stack-based buffer overflow, which occurs when the formEasySetPassword function fails to properly validate the length of user-supplied input in the curTime argument before copying it to a fixed-size buffer on the stack. This classic memory corruption vulnerability allows adjacent memory to be overwritten with attacker-controlled data, potentially including return addresses and function pointers that can redirect program execution. The vulnerability resides in the router's embedded web server that processes configuration changes, making it accessible through the device's administrative interface.
RemediationAI
Since the D-Link DIR-513 is end-of-life and no security patches will be released (Remediation Level: Unavailable), the primary remediation is to immediately replace the affected device with a currently supported router model from D-Link or another vendor. Organizations that cannot immediately replace the device should implement compensating controls including disabling remote management access to the web interface, restricting administrative access to trusted IP addresses only through firewall rules, using strong unique passwords for administrative accounts, and isolating the device on a separate network segment. Monitor the device logs for suspicious authentication attempts or unexpected configuration changes. Given the public availability of exploit code at https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/formEasySetPassword.md, these mitigations should be considered temporary measures only until device replacement is completed.
Buffer overflow in D-Link DIR-513 firmware 1.10 formAdvanceSetup function enables authenticated remote attackers to achi
Buffer overflow in D-Link DIR-513 1.10 POST request handler allows authenticated remote attackers to achieve arbitrary c
Buffer overflow in D-Link DIR-513 1.10 formSetPassword function allows authenticated remote attackers to achieve arbitra
Stack-based buffer overflow in D-Link DIR-513 1.10 router's email configuration interface allows authenticated remote at
Remote code execution in D-Link DIR-513 1.10 through stack-based buffer overflow in the /goform/formEasySetTimezone endp
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today