CVE-2025-8175: falha de alta gravidade em D-Link DI-8400
D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 1.8%
A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument share_enable leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
D-Link · DI-8400CVEs relacionadas — D-Link DI-8400
No mesmo produto, das mais perigosas para as menos.
CVE-2025-9938HIGHD-Link DI-8400 yyxz.asp yyxz_dlink_asp stack-based overflowEPSS 1.7%CVE-2026-91001CRITICALD-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflowEPSS 0.9%CVE-2026-101081CRITICALD-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflowEPSS 0.5%CVE-2026-10206HIGHD-Link DI-8400 dbsrv.asp stack-based overflowEPSS 0.5%