Medium severity6.8NVD Advisory· Published Nov 13, 2025· Updated Jul 5, 2026
CVE-2025-60674
CVE-2025-60674
Description
A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127 bytes, causing a stack overflow. An attacker with physical access or control over a USB device can exploit this vulnerability to potentially execute arbitrary code on the device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:dlink:dir-878_firmware:1.01b04:*:*:*:*:*:*:*
- D-Link/DIR-878A1 router firmwaredescription
Patches
Vulnerability mechanics
References
3- github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60674.mdnvdExploitThird Party Advisory
- www.dlink.com/en/security-bulletin/nvdVendor Advisory
- www.dlink.com/ennvdProduct
News mentions
0No linked articles in our index yet.