CVE-2025-7762
Published: 17 July 2025
Summary
CVE-2025-7762 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Dlink Di-8100 Firmware. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 22.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
A critical stack-based buffer overflow vulnerability, tracked as CVE-2025-7762 and also associated with CWE-119 and CWE-121, affects the D-Link DI-8100 router running firmware version 16.07.26A1. The flaw resides in the HTTP Request Handler component, specifically within the processing of the file /menu_nat_more.asp, where improper handling of input allows memory corruption on the stack.
An authenticated remote attacker can exploit the issue over the network by sending a crafted HTTP request to the affected endpoint. Successful exploitation grants the attacker full control over the device, enabling arbitrary code execution that impacts confidentiality, integrity, and availability without requiring user interaction.
Public exploit code has been disclosed via GitHub, and the EPSS score has remained flat at a low value of 0.01 with no observed increase since publication. No vendor advisory or patch information is referenced in the available sources.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-21829
Vulnerability details
A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menu_nat_more.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may…
more
be initiated remotely. The exploit has been disclosed to the public and may be used.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack-based buffer overflow in public-facing HTTP handler (/menu_nat_more.asp) on network device directly enables remote exploitation of the exposed web interface.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Flaw remediation directly addresses the stack-based buffer overflow by applying vendor patches or updates to the vulnerable D-Link DI-8100 firmware.
Information input validation in the HTTP Request Handler prevents buffer overflows by ensuring proper bounds checking on inputs to /menu_nat_more.asp.
Memory protection mechanisms like stack canaries and ASLR mitigate exploitation of the stack-based buffer overflow even if invalid input reaches the handler.