← All Advisories

D-Link DI-8300 buffer overflow in jingx_asp fx parameter causes denial of service

Last refreshed2026-09-30

Status: UPDATED  |  Advisory ID: CVE-2025-45058

Key Details

CVECVE-2025-45058
CVSS Score / Version7.5 (High) / CVSS v3.1
Updated2026-07-25
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Proseattack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected productsdlink di-8300_firmware
Classified asCWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
dlinkdi-8300_firmware
SubsystemsGeneral OT
SectorsMultiple

What to Know

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. (NVD)

What to Do

Monitor dlink's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-45058
CVEhttps://www.cve.org/CVERecord?id=CVE-2025-45058
Vendor advisoryhttps://www.dlink.com/en/security-bulletin/