Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

D-Link DI-8003: Malicious Data Injection via ASP Endpoint

CVE-2025-50657 · published 7 months ago
Summary

A security issue in the D-Link DI-8003 firmware allows attackers to inject malicious data into the device. This could potentially allow unauthorized access or disruption of the device. To protect your device, update to the latest firmware version.

Original advisory text
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint.
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published8 Apr 2026
Updated4 Nov 2026
First seen10 Apr 2026
Sources
CVE-2025-50657 · NVD
Track software like this
Free during beta