CVE-2025-45059
Published: 08 April 2026
Summary
CVE-2025-45059 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Dlink Di-8300 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 6.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents the buffer overflow vulnerability by validating crafted inputs to the 'fn' parameter in the tgfile_htm function.
Mandates timely patching or firmware updates to remediate the specific buffer overflow flaw in D-Link DI-8300 v16.07.26A1.
Provides denial-of-service protections to counter remote unauthenticated attacks causing crashes via the buffer overflow.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in unauthenticated public web function directly enables remote exploitation of public-facing application (T1190) resulting in system/application DoS via exploitation (T1499.004).
NVD Description
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Deeper analysisAI
CVE-2025-45059 is a buffer overflow vulnerability (CWE-120) affecting the D-Link DI-8300 router on firmware version 16.07.26A1. The flaw exists in the tgfile_htm function, triggered via a specially crafted value in the "fn" parameter, which can lead to a Denial of Service (DoS) condition. Published on 2026-04-08, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), highlighting its potential for high availability impact without compromising confidentiality or integrity.
Remote attackers with network access to the affected device can exploit this vulnerability without authentication, privileges, or user interaction. By sending a crafted input to the vulnerable parameter, they can trigger the buffer overflow, causing the device to crash or become unresponsive, thereby achieving a DoS.
Advisories and further details are available in the following references: https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md, https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-8300, and https://www.dlink.com/en/security-bulletin/.
Details
- CWE(s)