CVE-2026-4486 Details
Description
A vulnerability was found in D-Link DIR-513 1.10. This affects the function formEasySetPassword of the file /goform/formEasySetPassword of the component Web Service. The manipulation of the argument curTime results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
A stack-based buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises within the Web service, in the 'formEasySetPassword' function of the '/goform/formEasySetPassword' file. The vulnerability is triggered when the 'curTime' parameter is manipulated, allowing for remote exploitation. The 'curTime' parameter is retrieved without proper length validation, and when the 'language' parameter is set to anything other than 'SC' or 'TW', the application uses an unsafe 'sprintf' function to write the oversized 'curTime' string into a fixed-size stack buffer. This overflow can overwrite the return address, potentially leading to a denial-of-service condition or remote code execution.
D-Link users are advised to replace the affected product with an alternative, as no official fix is available. However, for those who can implement temporary measures, consider validating the 'curTime' parameter length and deploying a web application firewall to filter out malicious requests.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/formEasySetPassword.md | [email protected] | ExploitThird Party Advisory |
| https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formEasySetPassword/poc.py | [email protected] | Exploit |
| https://vuldb.com/?ctiid.352009 | [email protected] | Permissions RequiredVDB Entry |
| https://vuldb.com/?id.352009 | [email protected] | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.773537 | [email protected] | Issue TrackingVDB Entry |
| https://vuldb.com/?submit.773566 | [email protected] | Third Party AdvisoryVDB Entry |
| https://www.dlink.com/ | [email protected] | Product |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| dlink dir-513 firmware | 1.10 |
CPE
Remediation
| |
| dlink dir-513 | a1 a2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 3, 2026 | Initial Analysis | [email protected] |
| Mar 20, 2026 | New CVE Received | [email protected] |