CVE-2025-70231 | THREATINT

Description

D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode but fails to filter the value of the FILECODE parameter, resulting in a path traversal vulnerability.

PUBLISHED Reserved 2026-01-09 | Published 2026-03-05 | Updated 2026-03-06 | Assigner mitre

References

www.dlink.com/en/security-bulletin/

www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513

github.com/...-QAQ/CVEreport/tree/main/D-link/CVE-2025-70231

cve.org (CVE-2025-70231)

nvd.nist.gov (CVE-2025-70231)

Download JSON