CVE-2025-45058
Published: 08 April 2026
Summary
CVE-2025-45058 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Dlink Di-8300 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 6.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents buffer overflow exploitation by validating the fx parameter input in the jingx_asp function against crafted payloads.
Remediates the specific buffer overflow flaw in the jingx_asp function through timely firmware patching as advised by D-Link.
Implements denial-of-service protections to mitigate the availability impact of buffer overflow-induced crashes on the router.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in public-facing web interface (jingx_asp/fx param) directly enables remote unauthenticated exploitation causing DoS on network device.
NVD Description
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Deeper analysisAI
CVE-2025-45058 is a buffer overflow vulnerability (CWE-120) in the D-Link DI-8300 router running firmware version 16.07.26A1. The flaw occurs in the jingx_asp function when processing the fx parameter, enabling attackers to trigger a Denial of Service (DoS) condition through a specially crafted input. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), highlighting its potential for significant availability disruption.
The vulnerability can be exploited by unauthenticated attackers with network access to the affected device, requiring low complexity and no user interaction. By sending a malicious payload to the fx parameter, attackers can overflow the buffer in the jingx_asp function, crashing the router and rendering it unavailable, which disrupts network services hosted by the device.
Mitigation guidance and patches may be available through D-Link's official resources, including the English security bulletin at https://www.dlink.com/en/security-bulletin/, Chinese product support page for the DI-8300 at https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-8300, and a related entry in the IoT vulnerability collection at https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md. Security practitioners should consult these for firmware updates or workarounds.
Details
- CWE(s)