CVE-2025-50663
Published: 08 April 2026
Summary
CVE-2025-50663 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Dlink Di-8003 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 17.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-50663 is a buffer overflow vulnerability (CWE-121) affecting the D-Link DI-8003 device running firmware version 16.07.26A1. The flaw stems from improper handling of the "name" parameter in the /usb_paswd.asp endpoint, which can lead to memory corruption when processing malformed input.
The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating it is exploitable over the network with low attack complexity, no authentication or user interaction required, and unchanged impact scope. An unauthenticated remote attacker can trigger the buffer overflow to cause a denial-of-service condition, resulting in high availability impact such as device crashes or reboots, with no direct confidentiality or integrity effects.
D-Link has issued security advisory SAP10505, available at https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10505, along with general security bulletins at https://www.dlink.com/en/security-bulletin/. Practitioners should review these resources for patch details, firmware updates, or other mitigation recommendations. The issue is also listed in the IoT vulnerability collection at https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-209349
Vulnerability details
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usb_paswd.asp endpoint.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in unauthenticated public web endpoint (/usb_paswd.asp) directly enables remote exploitation of a network device to crash/reboot it (DoS).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces validation of the 'name' parameter at the /usb_paswd.asp endpoint to prevent buffer overflow from malformed input.
Implements memory safeguards such as stack canaries or address space layout randomization to protect against memory corruption from buffer overflows.
Requires timely application of firmware patches from D-Link advisory SAP10505 to remediate the specific buffer overflow flaw.