Status: UPDATED
| Advisory ID: CVE-2025-50644
Key Details
| CVE | CVE-2025-50644 |
| CVSS Score / Version | 7.5 (High) / CVSS v3.1 |
| Updated | 2026-07-25 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high. |
| Affected products | dlink di-8003_firmware |
| Classified as | CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')) |
Affected Products, Subsystems & Sectors
| Subsystems | General OT |
| Sectors | Multiple |
What to Know
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.
What to Do
Monitor dlink's web page for any future patch releases. See vendor advisory link below.
References