CVE-2025-71383

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-14

Assigner: MITRE

Description

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occurs because of an error in a JSON parser.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2025-71383

EUVD

EUVD-2025-211036

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

The Dbit WIFI4 N300 1.0.0 devices have a vulnerability where the management interface can be crashed by sending a request from the local Wi-Fi network that omits the username or password field in the /api/login JSON request. This issue stems from a flaw in the device's JSON parser.

Detection Guidance

This vulnerability can be detected by sending a malformed JSON request to the Dbit WIFI4 N300 1.0.0 management interface. Use tools like curl to send a request without the /api/login username or password field. Example command: curl -X POST http://<device-ip>/api/login -H "Content-Type: application/json" -d '{}'.

Impact Analysis

This vulnerability could allow an attacker on the same local Wi-Fi network to crash the device's management interface, potentially causing a denial of service and disrupting network management functions.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other standards as it involves a denial-of-service condition on a local Wi-Fi management interface. No evidence suggests data exposure or privacy violations.

Mitigation Strategies

Immediately update the Dbit WIFI4 N300 firmware to the latest version to fix the JSON parser error. Disable remote management access if not required and restrict Wi-Fi network access to trusted devices only.

Hi! I’m here to help you understand CVE-2025-71383. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70