CVE-2025-7908: D-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflow
A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file /ddns.asp?opt=add of the component jhttpd. The manipulation of the argument mx leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7908?
CVE-2025-7908 has been declared as critical due to its exploitability and potential impact.
What type of vulnerability is CVE-2025-7908?
CVE-2025-7908 is a stack-based buffer overflow vulnerability affecting the D-Link DI-8100.
How can I mitigate CVE-2025-7908?
To mitigate CVE-2025-7908, it is recommended to update the D-Link DI-8100 firmware to the latest version available.
What component of D-Link DI-8100 is affected by CVE-2025-7908?
CVE-2025-7908 affects the jhttpd component, specifically the sprintf function in the /ddns.asp?opt=add file.
What is the impact of exploiting CVE-2025-7908?
Exploiting CVE-2025-7908 can potentially allow attackers to execute arbitrary code on the affected D-Link DI-8100 device.