Vulnerability Description
A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The manipulation of the argument SERVER_ID/HTTP_SID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-816L Firmware | 2.06.b09 |
| Dlink | Dir-816L | - |
Related Weaknesses (CWE)
References
- https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(gena.ExploitThird Party Advisory
- https://vuldb.com/?ctiid.332478Permissions RequiredVDB Entry
- https://vuldb.com/?id.332478Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.685540Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
- https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(gena.ExploitThird Party Advisory
FAQ
What is CVE-2025-13189?
CVE-2025-13189 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The manipulation of the argument SERVER_ID/HTTP_SID leads to stack-based b...
How severe is CVE-2025-13189?
CVE-2025-13189 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13189?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-816L Firmware, Dlink Dir-816L.