CVE-2025-3538: D-Link DI-8100 jhttpd auth.asp auth_asp stack-based overflow
A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function authasp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3538?
CVE-2025-3538 has been rated as critical.
What component is affected by CVE-2025-3538?
CVE-2025-3538 affects the jhttpd component of the D-Link DI-8100.
How does the CVE-2025-3538 vulnerability manifest?
CVE-2025-3538 manifests as a stack-based buffer overflow due to insufficient validation of the callback argument.
Is the D-Link DI-8100 the only affected device for CVE-2025-3538?
Yes, the D-Link DI-8100 is currently the only known affected device for CVE-2025-3538.
How can CVE-2025-3538 be mitigated?
Mitigation for CVE-2025-3538 involves updating to the latest firmware version provided by D-Link.