• Home Support Forums Security Advisories Shop     English | French
Security Announcement
Announcement > SAP10436
(non-US) DIR-513 : All Hardware Verisons / All Firmware Version : End-of-Life (EoL) / End-of-Service-life (Eos) : Vulnerabilities Reported
Publication ID: SAP10436
Resolved Status: Yes
Published on: 7 July 2025 10:50 GMT
Last updated on: 7 July 2025 10:50 GMT

 

Overview  

 

The DIR-513, not available in the US, all hardware revisions and firmware versions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle.  The product has been identified as having multiple vulnerabilities.

 

D-Link Corporation and D-Link North America (D-Link Systems, Inc.) recommend that all current users take one or more of the following actions:

1.             Transition to a current-generation product that has active firmware development and customer support.

2.             Perform comprehensive data backup.

3.             Contact our local regional office for further recommendations or information (LINK). 

 

By standard industry practice, products that have reached EOL/EOS status may no longer receive technical support or firmware updates. Please read the detailed information and recommendations provided below.

 

3rd Party Report information   

Report 1: (06/30/2025) 

        Author(s):

lbazhuayu (VulDB User)

Disclosure:  CVE-2025-6882 : (Link) :D-Link DIR-513 formSetWanPPTP buffer overflow

Description:A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow.

         CWE: CWE-120: Buffer Overflow / CWE-119: Memory Corruption

 

         CVSS:

Score

Severity

Version

Vector String

8.7

HIGH

4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

8.8

HIGH

3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

8.8

HIGH

3.0

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

9.0

2.0

AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR

         Affected: All models, Derivative Models, All Revisions, and All Firmware

 

Affected Models

Model

Rev

Region

Accused firmware

EOL/EOS

Legacy Site

Recommendation

 Last Updated

DIR-513

All

Worldwide

v1.0 or Lower

04/24/2024

No (Non-US)

Retire and Replace

07/07/2025

 

 

Recommendation for End of Support /End of Life Products

From time to time, D-Link will determine that some of its products have reached the End of Support ("EOS") or End of Life (“EOL”). D-Link may choose to EOS/EOL a product due to the evolution of technology, market demands,   innovations, product efficiencies based on new technologies, or the product matures over time. It should be replaced by functionally superior technology.

 

For US Consumer

 

If a product has reached its End of Support ("EOS") and End of Life ("EOL"), there is usually no further extended support or development available for it.

 

Typically, for these products, D-Link will be unable to resolve device or firmware issues since all development and customer support have ceased. 

 

D-Link strongly recommends that this product be retired and cautions that any further use of this product may be a risk to devices connected to it. If US consumers continue to use these devices against D-Link's recommendation, please ensure the device has the most recent firmware, frequently update the device's unique password to access its web configuration, and always enable Wi-Fi encryption with a unique password.