Status: UPDATED
| Advisory ID: CVE-2025-50647
Key Details
| CVE | CVE-2025-50647 |
| CVSS Score / Version | 7.5 (High) / CVSS v3.1 |
| Updated | 2026-07-25 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high. |
| Affected products | dlink di-8003_firmware |
| Classified as | CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')) |
Affected Products, Subsystems & Sectors
| Subsystems | General OT |
| Sectors | Multiple |
What to Know
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint.
What to Do
Monitor dlink's web page for any future patch releases. See vendor advisory link below.
References