Vulnerability · Published May 18, 2025 · Assigned by VulDB

CVE-2025-4883D-Link DI-8100 Connection Limit Page ctxz.asp ctxz_asp stack-based overflow

High 7.2

In plain English

A high-severity stack buffer overflow in DI-8100 from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 8.9% (higher than 95% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High

Exploit odds (30 days)8.9%top 4.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxz_asp of the file /ctxz.asp of the component Connection Limit Page. The manipulation of the argument def/defTcp/defUdp/defIcmp/defOther leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
D-Link	DI-8100	16.07.26A1

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

VDB-309436 | D-Link DI-8100 Connection Limit Page ctxz.asp ctxz_asp stack-based overflow vdb-entry, technical-description
VDB-309436 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #576392 | D-Link DI-8100 DI-8100-16.07.26A1 Stack-based Buffer Overflow third-party-advisory
https://github.com/Yhuanhuan01/DI-8100_Vulnerability_Report/blob/main/DI-8100-Vulnerability_Report_ctxz.md exploit
https://www.dlink.com/ product