CVE-2025-70231 - Vulnerability Analysis

Overview

D-Link DIR-513 1.10 contains a path traversal caused by improper filtering of the FILECODE parameter in /goform/getAuthCode during POST requests, letting attackers access arbitrary files remotely, exploit requires crafted POST request.

Severity & Score

Impact

Attackers can access arbitrary files on the device, potentially exposing sensitive information or system files.

Mitigation

Update to the latest firmware version provided by D-Link.

References

• https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70231
• https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513
• https://www.dlink.com/en/security-bulletin/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner