← Voltar para CVEs

CVE-2025-5228

HIGH

8.8

Descricao

A vulnerability was found in D-Link DI-8100 up to 20250523. It has been classified as critical. Affected is the function httpd_get_parm of the file /login.cgi of the component jhttpd. The manipulation of the argument notify leads to stack-based buffer overflow. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.

Detalhes CVE

Pontuacao CVSS v3.18.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueADJACENT_NETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado5/27/2025

Ultima modificacao7/15/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

dlink:di-8100dlink:di-8100_firmware

Fraquezas (CWE)

CWE-119CWE-121

Referencias

https://github.com/xubeining/Cve_report/blob/main/The%20D-Link%20DI-8100%20contains%20a%20binary%20vulnerability.md(cna@vuldb.com)

https://vuldb.com/?ctiid.310326(cna@vuldb.com)

https://vuldb.com/?id.310326(cna@vuldb.com)

https://vuldb.com/?submit.583430(cna@vuldb.com)

https://www.dlink.com/(cna@vuldb.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.