CVE-2025-11339

🗓️ 06 Oct 2025 16:32:09Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 26 Views🌐 WEB

Remote buffer overflow in D-Link DI-7100G C1 via hi_block.asp popupId in jhttpd; exploit disclosed.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-11339	6 Oct 202517:13	–	circl
CNNVD	D-Link DI-7100G 安全漏洞	6 Oct 202500:00	–	cnnvd
CNVD	D-Link DI-7100G C1 popupId parameter buffer overflow vulnerability	21 Oct 202500:00	–	cnvd
Cvelist	CVE-2025-11339 D-Link DI-7100G C1 jhttpd hi_block.asp sub_4BD4F8 buffer overflow	6 Oct 202516:32	–	cvelist
EUVD	EUVD-2025-32557	6 Oct 202518:31	–	euvd
NVD	CVE-2025-11339	6 Oct 202517:16	–	nvd
OSV	CVE-2025-11339	6 Oct 202517:16	–	osv
Positive Technologies	PT-2025-40913	6 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-11339	7 Oct 202517:35	–	redhatcve
Vulnrichment	CVE-2025-11339 D-Link DI-7100G C1 jhttpd hi_block.asp sub_4BD4F8 buffer overflow	6 Oct 202516:32	–	vulnrichment

NVD

Vulners

Node

dlink di-7100g_c1_firmwareMatch2025-09-28

AND

dlink di-7100g_c1Match-

[
  {
    "vendor": "D-Link",
    "product": "DI-7100G C1",
    "versions": [
      {
        "version": "20250928",
        "status": "affected"
      }
    ],
    "modules": [
      "jhttpd"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
dlink	www.dlink.com/
yuque	www.yuque.com/jh0ng/vmpda6/zr11zfssl8h74bn3
yuque	www.yuque.com/jh0ng/vmpda6/zr11zfssl8h74bn3
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
popupId	query param	/webchat/hi_block.asp	Buffer overflow triggered by manipulating popupId in hi_block.asp, enabling remote exploitation.	CWE-119, CWE-120

17 Jun 2026 08:30Current

6.9Medium risk

Vulners AI Score6.9

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00881

SSVC