CVE-2025-7603
Published: 14 July 2025
Summary
CVE-2025-7603 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Dlink Di-8100 Firmware. Its CVSS base score is 7.3 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 18.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
A stack-based buffer overflow vulnerability exists in the HTTP Request Handler component of D-Link DI-8100 firmware version 16.07.26A1, specifically within the /jingx.asp endpoint. The flaw, tracked as CVE-2025-7603 and assigned CWE-119 and CWE-121, arises from improper handling of crafted input that can corrupt the stack during request processing. It carries a CVSS 4.0 score of 7.3 and permits remote exploitation without user interaction.
An authenticated remote attacker can send a specially formed HTTP request to the affected endpoint, achieving arbitrary code execution or a denial of service on the device. Public exploit code has already been released, confirming that the attack can be launched over the network against exposed management interfaces.
No vendor advisory or patch information is provided in the available references, which include only a public exploit disclosure on GitHub, VulDB entries, and the vendor homepage. The EPSS score remains flat at 0.0151 with no observed increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21344
Vulnerability details
A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. Affected is an unknown function of the file /jingx.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to…
more
launch the attack remotely. The exploit has been disclosed to the public and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack-based buffer overflow in public-facing HTTP handler (/jingx.asp) on D-Link router enables remote exploitation for initial access (T1190) and application-level DoS via crash (T1499.004).
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Ongoing control assessments and code testing (static/dynamic analysis, fuzzing) surface memory buffer restriction failures, which are then remediated before release.
Managed runtimes used by platform-independent applications (e.g., JVM, CLR) enforce memory safety, preventing most buffer overflows that require direct memory manipulation.
Memory protections (e.g., W^X, ASLR) make exploitation of buffer-boundary violations far harder to turn into code execution.
Detects exploitation attempts that produce memory corruption, crashes, or anomalous behavior.