Lucene search
+L

7 matches found

CNVD
CNVD
•added 2026/04/16 12:00 a.m.•30 views

D-Link DI-8003 Buffer Overflow Vulnerability (CNVD-2026-17696)

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability stems from improper handling of the name parameter in the /usbpaswd.asp endpoint, which can be exploited by an attacker to cause a denial of service...

7.5CVSS5.7AI score0.00516EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•17 views

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the name parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the end-point /usbpaswd.asp...

7.8CVSS6.1AI score0.00516EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/04/08 9:33 p.m.•28 views

EUVD-2025-209349

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usbpaswd.asp endpoint...

6.2AI score0.00516EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/08 12:00 a.m.•8 views

CVE-2025-50663

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usbpaswd.asp endpoint...

7.4AI score0.00516EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/08 12:00 a.m.•44 views

CVE-2025-50663

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usbpaswd.asp endpoint...

0.00516EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/08 12:00 a.m.•32 views

CVE-2025-50663

A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (version 16.07.26A1 ) firmware. The flaw is caused by the improper handling of the name parameter within the /usb_paswd.asp endpoint. An attacker can exploit this by sending a specially crafted GET request to...

7.5CVSS7.4AI score0.00516EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/09/15 10:02 a.m.•35 views

CVE-2025-10440 D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection

A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub4621DC of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument hname leads to os comma...

6.5CVSS0.12387EPSS
SaveExploits0References6
Rows per page
Query Builder