CVE-2025-11339: D-Link DI-7100G C1 jhttpd hi_block.asp sub_4BD4F8 buffer overflow
A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub4BD4F8 of the file /webchat/hiblock.asp of the component jhttpd. The manipulation of the argument popupId leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11339?
CVE-2025-11339 has been classified with a high severity due to its potential for remote exploitation and buffer overflow risks.
How do I fix CVE-2025-11339?
To fix CVE-2025-11339, it's recommended to update the D-Link DI-7100G C1 firmware to a newer version that addresses this vulnerability.
Who is affected by CVE-2025-11339?
CVE-2025-11339 affects users of the D-Link DI-7100G C1 router up to and including version 20250928.
What type of vulnerability is CVE-2025-11339?
CVE-2025-11339 is a buffer overflow vulnerability that can be exploited by manipulating the argument popupId in the web interface.
Can CVE-2025-11339 be exploited remotely?
Yes, CVE-2025-11339 can be exploited remotely, allowing attackers to initiate attacks without physical access to the device.