CVE-2025-71384: Buffer Overflow

Published Oct 6, 2026

Updated

Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,

Affected Software

1 affected component

Dbit WIFI4 N300=1.0.0

Event History

Oct 6, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:17 PM

Description

Frequently Asked Questions

Who can exploit this issue?

An administrator connected from the local Wi-Fi network can exploit it. The available information does not indicate that unauthenticated or Internet-based attackers can do so.

What access is required to trigger the vulnerability?

The attacker needs administrative access and local Wi-Fi network access to the affected device. Exploitation is performed by supplying crafted data in the comment field of the /api/addStaticDHCP endpoint.

What is the impact of successful exploitation?

Successful exploitation allows execution of OS commands on the device. The issue is caused by a stack-based buffer overflow.

CVE-2025-71384: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What access is required to trigger the vulnerability?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access is required to trigger the vulnerability?

What is the impact of successful exploitation?