D Link · Di-8100 · CVE-2025-7908
**Name of the Vulnerable Software and Affected Versions**
D-Link DI-8100 version 1.0
**Description**
A critical issue exists in the D-Link DI-8100 device. The `sprintf` function within the `/ddns.asp?opt=add` file, part of the jhttpd component, is susceptible to a stack-based buffer overflow. Manipulation of the `mx` argument can trigger this issue, allowing for remote exploitation. The exploit has been publicly disclosed.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.