Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.5
CVE-2025-51383: D-Link DI-8200 Router: Malicious Input Can Crash Device
CVE-2025-51383 · published 1 year ago
Summary
A security issue in the D-Link DI-8200 router's VPN feature allows an attacker to potentially crash the device by sending a specially crafted input. This could cause the router to become unavailable, disrupting internet access. To protect your network, update the router's firmware to the latest version.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| dlink | di-8200_firmware |
16.07.26a1 cpe:2.3:o:dlink:di-8200_firmware:16.07.26a1:*:*:*:*:*:*:* |
Original advisory text
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.
References
- https://github.com/draw-hub/zMeedA/blob/master/CVE-2025-51383.md Exploit Third Party Advisory
- https://www.dlink.com/en/security-bulletin/ Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published31 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-51383 · NVD
Track software like this
Free during beta