PT-2025-47015 · Netis · Netis Adsl Router Dl4322D

Published 2025-11-14 · Updated 2025-11-15 · CVE-2018-25125

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Netis ADSL Router DL4322D firmware version RTK 2.1.1

Description The Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow issue within the embedded FTP service. An authenticated remote user can cause a denial of service by sending an FTP command, such as ABOR, with an excessively long argument. This causes the FTP service, and consequently the router, to crash or become unresponsive, leading to a loss of availability. The vulnerable component is the FTP service.

Recommendations Apply a firmware update that addresses the buffer overflow in the FTP service.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-25125

Affected Products

Netis Adsl Router Dl4322D

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-25125 · Security Note
• https://vulncheck.com/advisories/netis-dl4322d-ftp-service-dos · Note
• https://netis-systems.com · Note
• https://web.archive.org/web/20180731191918/http://netis-systems.com/Home/detail/id/74.html · Note
• https://t.me/CVEtracker/37376 · Telegram Post
• https://exploit-db.com/exploits/45424 · Note