Vulnerability record · CVE-2025-6334 · published 20 June 2025

CVE-2025-6334: Dlink dir-867 firmware memory buffer overflow vulnerability

Dlink · Dir 867 Firmware

A vulnerability has been found in D-Link DIR-867 1.0 and classified as critical. This vulnerability affects the function strncpy of the component Query String Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

7.4 CVSS 4.0 High EPSS 0.95% · top 40.2% CWE-119 · Memory buffer overflowCWE-121 · Stack-based buffer overflow

7.4CVSS 4.0 base score, v2 9.0

0.95%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

5References

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Dir 867 Firmware Dlink

References

Link	Tags
https://github.com/Thir0th/Thir0th-CVE/blob/main/DIR-867%20AC1750.md	Issue TrackingThird Party Advisory
https://vuldb.com/?ctiid.313330	Permissions RequiredVDB Entry
https://vuldb.com/?id.313330	Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.596579	Third Party AdvisoryVDB Entry
https://www.dlink.com/	Product

Track CVE-2025-6334 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-24762Dlink dir-867 firmware os command injection vulnerabilityOS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress pa…EPSS 2.5%13 Mar 2023 8.8CVE-2022-41140Dlink dir-882-us firmware stack-based buffer overflow vulnerabilityThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication i…EPSS 1.1%26 Jan 2023 8.8CVE-2020-8863D-Link DIR router HNAP authentication bypass allows code executionD-Link DIR-867, DIR-878 and DIR-882 routers running firmware 1.10B04 mishandle HNAP login requests, failing to properly implement the authentication …EPSS 77%analysed23 Mar 2020 8.8CVE-2020-8864D-Link DIR router HNAP authentication bypass via empty passwordD-Link DIR-867, DIR-878 and DIR-882 routers running firmware 1.10B04 mishandle empty passwords in HNAP login requests, allowing authentication to be …EPSS 80%analysed23 Mar 2020 7.8CVE-2022-1262Dlink dir-1360 firmware os command injection vulnerabilityA command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary comm…EPSS 2.2%11 Apr 2022 9.5CVE-2026-88772Citrix netscaler application delivery controller memory buffer overflow vulnerabilityVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 F…KEV27 Sep 2026 8.8CVE-2026-8452Citrix NetScaler ADC and Gateway memory buffer overflow causes DoSCVE-2026-8452 is a memory buffer overflow (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that leads to unpredictable or erroneous behavior a…KEVEPSS 1.0%analysed30 Jun 2026 8.8CVE-2009-3459Adobe Reader and Acrobat heap buffer overflow via crafted PDFAdobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 contain a heap-based buffer overflow (CWE-122) triggered by a crafted…KEVEPSS 87%analysed13 Oct 2009

Source: NIST National Vulnerability Database (record CVE-2025-6334), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.