A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/Fizz-L/CVE1/blob/main/DI-8100Command%20execution2.md | Exploit VDB Entry Third Party Advisory |
| https://vuldb.com/?ctiid.304577 | Permissions Required VDB Entry |
| https://vuldb.com/?id.304577 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.524224 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Jul 2025, 15:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CPE | cpe:2.3:o:dlink:di-8100_firmware:16.07.26a1:*:*:*:*:*:*:* cpe:2.3:h:dlink:di-8100:-:*:*:*:*:*:*:* |
|
| First Time |
Dlink di-8100 Firmware
Dlink di-8100 Dlink |
|
| References | () https://vuldb.com/?submit.524224 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product | |
| References | () https://vuldb.com/?id.304577 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.304577 - Permissions Required, VDB Entry | |
| References | () https://github.com/Fizz-L/CVE1/blob/main/DI-8100Command%20execution2.md - Exploit, VDB Entry, Third Party Advisory |
13 Apr 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-13 19:15
Updated : 2025-07-16 15:36
NVD link : CVE-2025-3538
Mitre link : CVE-2025-3538
JSON object : View
Products Affected
dlink
- di-8100
- di-8100_firmware