PT-2025-30219 · D Link · Di-8100

Bazhuayu · Published 2025-07-18 · Updated 2025-07-25 · CVE-2025-7908

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DI-8100 version 1.0

Description A critical issue exists in the D-Link DI-8100 device. The sprintf function within the /ddns.asp?opt=add file, part of the jhttpd component, is susceptible to a stack-based buffer overflow. Manipulation of the mx argument can trigger this issue, allowing for remote exploitation. The exploit has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-08943

CVE-2025-7908

Affected Products

Di-8100

References · 14

• 🔥 https://github.com/buobo/bo-s-CVE/blob/main/DI-8100/wp.md · Exploit
• https://bdu.fstec.ru/vul/2025-08943 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-7908 · Security Note
• https://twitter.com/CveFindCom/status/1947298869634625698 · Twitter Post
• https://vuldb.com/?ctiid.317023 · Note
• https://vuldb.com/?id.317023 · Note
• https://t.me/cvenotify/129629 · Telegram Post
• https://t.me/cvetracker/28292 · Telegram Post
• https://twitter.com/CVEnew/status/1947042588445307013 · Twitter Post
• https://twitter.com/dailycve/status/1948795252711792662 · Twitter Post
• https://dlink.com · Note
• https://twitter.com/VulmonFeeds/status/1947046377839546846 · Twitter Post
• https://vuldb.com/?submit.618582 · Note
• https://t.me/cvenotify/129682 · Telegram Post