CVE-2025-50671: Buffer Overflow
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglref.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with excessively long strings in parameters name, en, userid, shibiename, time, act, log, and rpri.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-50671?
The severity of CVE-2025-50671 is considered high due to its potential for remote code execution through a buffer overflow.
How do I fix CVE-2025-50671?
To fix CVE-2025-50671, update your D-Link DI-8003 firmware to the latest version provided by D-Link.
What can an attacker do with CVE-2025-50671?
An attacker can exploit CVE-2025-50671 by sending crafted HTTP GET requests to execute arbitrary code on the affected device.
Which devices are affected by CVE-2025-50671?
CVE-2025-50671 affects the D-Link DI-8003 with firmware version 16.07.26A1.
Is CVE-2025-50671 easy to exploit?
Yes, CVE-2025-50671 can be exploited easily with the right crafted HTTP requests, making it a significant security risk.