CVE-2025-5228: D-Link DI-8100 jhttpd login.cgi httpd_get_parm stack-based overflow
A vulnerability was found in D-Link DI-8100 up to 20250523. It has been classified as critical. Affected is the function httpdgetparm of the file /login.cgi of the component jhttpd. The manipulation of the argument notify leads to stack-based buffer overflow. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5228?
CVE-2025-5228 has been classified as critical due to its potential to cause severe security issues.
How do I fix CVE-2025-5228?
To fix CVE-2025-5228, update the D-Link DI-8100 device to the latest firmware version beyond 20250523.
What type of vulnerability is CVE-2025-5228?
CVE-2025-5228 is a stack-based buffer overflow vulnerability affecting the jhttpd component.
Which software is affected by CVE-2025-5228?
CVE-2025-5228 affects the D-Link DI-8100 up to and including version 20250523.
What can be exploited in CVE-2025-5228?
CVE-2025-5228 can be exploited through manipulation of the notify argument in the httpd_get_parm function.