CVE-2025-50672
Published: 08 April 2026
Summary
CVE-2025-50672 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Dlink Di-8003 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 17.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Requires validation of parameters in the /yyxz_dlink.asp web endpoint to prevent buffer overflows from malicious input.
Implements memory protections such as stack guards and non-executable memory to mitigate exploitation of the buffer overflow leading to memory corruption.
Mandates timely remediation of the identified buffer overflow flaw through firmware updates as per the vendor security bulletin.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in unauthenticated public web endpoint directly enables remote exploitation of a public-facing application (T1190) resulting in DoS via application/system exploitation (T1499.004).
NVD Description
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxz_dlink.asp endpoint.
Deeper analysisAI
CVE-2025-50672 is a buffer overflow vulnerability (CWE-120) affecting the D-Link DI-8003 device on firmware version 16.07.26A1. The flaw arises from improper handling of parameters in the /yyxz_dlink.asp web endpoint, which can lead to memory corruption when processing malicious input.
The vulnerability carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Remote attackers require no authentication or privileges and can exploit it over the network with low attack complexity and no user interaction. Successful exploitation results in a denial-of-service condition with high impact on availability, such as device crashes or reboots, but without compromising confidentiality or integrity.
Mitigation guidance and additional details are available in the vendor's security bulletin at https://www.dlink.com/en/security-bulletin/ and the IoT vulnerability collection on GitHub at https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md.
Details
- CWE(s)