PT-2026-31340 · D Link · Di-8003G+5

Published 2026-04-08 · Updated 2026-04-08 · CVE-2025-52222

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1, DI-8500 version 16.07.26A1 D-Link DI-8003G version 17.12.21A1, DI-8200G version 17.12.20A1, DI-8200 version 16.07.26A1, DI-8400 version 16.07.26A1, DI-8004w version 16.07.26A1, DI-8100 version 16.07.26A1, and DI-8100G version 17.12.20A1

Description A buffer overflow exists in the radius asp function through the rd en, rd auth, rd acct, http hadmin, http hadminpwd, rd key, and rd ip parameters. A crafted request can trigger a Denial of Service (DoS).

Recommendations D-Link DI-8003 version 16.07.26A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8500 version 16.07.26A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8003G version 17.12.21A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8200G version 17.12.20A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8200 version 16.07.26A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8400 version 16.07.26A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8004w version 16.07.26A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8100 version 16.07.26A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. D-Link DI-8100G version 17.12.20A1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-52222

Affected Products

Di-8003G

Di-8004W

Di-8100

Di 8200

Di-8400

Di-8500

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-52222 · Security Note
• https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md · Note
• https://twitter.com/vuldb/status/2041965195317362731 · Twitter Post
• https://dlink.com/en/security-bulletin · Note