CVE-2025-7790: D-Link DI-8100 HTTP Request menu_nat.asp stack-based overflow
A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part of the file /menunat.asp of the component HTTP Request Handler. The manipulation of the argument outaddr/inaddr/outport/proto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7790?
CVE-2025-7790 is classified as a critical vulnerability.
How do I fix CVE-2025-7790?
To fix CVE-2025-7790, update the D-Link DI-8100 device to the latest firmware version provided by D-Link.
What components are affected by CVE-2025-7790?
CVE-2025-7790 affects the HTTP Request Handler of the D-Link DI-8100, specifically the /menu_nat.asp file.
What types of attacks can exploit CVE-2025-7790?
CVE-2025-7790 can be exploited through stack-based buffer overflow attacks by manipulating specific parameters.
Is CVE-2025-7790 under active exploitation?
Details regarding active exploitation of CVE-2025-7790 are not specified, but its critical classification indicates that it may be targeted.