CVE-2025-25892

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dsl-3782_firmware:1.01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dsl-3782:-:*:*:*:*:*:*:*

History

02 May 2025, 15:46

Type Values Removed Values Added
First Time Dlink
Dlink dsl-3782 Firmware
Dlink dsl-3782
CPE cpe:2.3:h:dlink:dsl-3782:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dsl-3782_firmware:1.01:*:*:*:*:*:*:*
References () https://github.com/2664521593/mycve/blob/main/BOF_in_D-Link%20DSL-3782_3.pdf - () https://github.com/2664521593/mycve/blob/main/BOF_in_D-Link%20DSL-3782_3.pdf - Broken Link

19 Feb 2025, 16:15

Type Values Removed Values Added
Summary
  • (es) Se descubrió una vulnerabilidad de desbordamiento del búfer en D-Link DSL-3782 V1.01 a través de los parámetros SSTARTIP, SendIP, DSTARTIP y DENDIP. Esta vulnerabilidad permite a los atacantes causar una denegación de servicio (DOS) a través de un paquete manipulado.
References () https://github.com/2664521593/mycve/blob/main/BOF_in_D-Link%20DSL-3782_3.pdf - () https://github.com/2664521593/mycve/blob/main/BOF_in_D-Link%20DSL-3782_3.pdf -
CWE CWE-121
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.7

18 Feb 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-18 22:15

Updated : 2025-05-02 15:46


NVD link : CVE-2025-25892

Mitre link : CVE-2025-25892

CVE.ORG link : CVE-2025-25892


JSON object : View

Products Affected

dlink

  • dsl-3782
  • dsl-3782_firmware
CWE
CWE-121

Stack-based Buffer Overflow