CVE-2025-60679 describes a stack buffer overflow in the upload.cgi module of the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img. The vulnerability stems from reading /proc/version into a 512-byte buffer and then concatenating it via sprintf() into another 512-byte buffer that already contains a 29-byte constant. If the input exceeds 481 bytes, this leads to a stack buffer overflow, enabling potential arbitrary code execution. The vulnerability requires an attacker to control the content of /proc/version. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker with the ability to control /proc/version content to execute arbitrary code on the affected device. This could lead to full compromise of the router, impacting confidentiality, integrity, and availability of the device and potentially the network it serves.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict access to the device and monitor for unusual activity related to the upload.cgi module. Avoid exposing the device to untrusted networks where an attacker could manipulate /proc/version content.