7.5

CVE-2025-52222

D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip parameters in the radius_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dlink ≫ Di-8100 Firmware Version 16.07.26a1
   Dlink ≫ Di-8100 Version -
Dlink ≫ Di-8100g Firmware Version 17.12.20a1
   Dlink ≫ Di-8100g Version -
Dlink ≫ Di-8004w Firmware Version 16.07.26a1
   Dlink ≫ Di-8004w Version -
Dlink ≫ Di-8003g Firmware Version 17.12.21a1
   Dlink ≫ Di-8003g Version -
Dlink ≫ Di-8003 Firmware Version 16.07.26a1
   Dlink ≫ Di-8003 Version -
Dlink ≫ Di-8500 Firmware Version 16.07.26a1
   Dlink ≫ Di-8500 Version -
Dlink ≫ Di-8200g Firmware Version 17.12.20a1
   Dlink ≫ Di-8200g Version -
Dlink ≫ Di-8200 Firmware Version 16.07.26a1
   Dlink ≫ Di-8200 Version a1
Dlink ≫ Di-8400 Firmware Version 16.07.26a1
   Dlink ≫ Di-8400 Version a1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.251
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.dlink.com/en/security-bulletin/
Vendor Advisory
https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md
Third Party Advisory