CVE-2025-71384

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-14

Assigner: MITRE

Description

Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2025-71384

EUVD

EUVD-2025-211035

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in Dbit WIFI4 N300 version 1.0.0 devices. It allows an attacker on the local Wi-Fi network with administrator privileges to execute arbitrary operating system commands by sending a specially crafted request to the /api/addStaticDHCP endpoint, specifically through the comment field.

Detection Guidance

This vulnerability requires network access to the vulnerable device's web interface. Check for unexpected command execution by monitoring network traffic to the device's IP address on port 80 or 443. Look for POST requests to /api/addStaticDHCP with unusually long comment fields. No specific commands are provided in the available context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain full control over the affected device. This may lead to unauthorized access to network traffic, data interception, or further attacks on connected devices. The impact depends on the device's role in the network and the privileges of the compromised account.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations such as GDPR or HIPAA if it results in unauthorized access to sensitive data. Organizations may face legal penalties, reputational damage, and loss of customer trust due to potential data breaches or privacy violations.

Mitigation Strategies

Immediately disconnect the Dbit WIFI4 N300 1.0.0 device from the network to prevent unauthorized access. Update the device firmware to the latest version if a patch is available. Disable remote administration features and restrict access to the device's admin interface to trusted networks only.

Hi! I’m here to help you understand CVE-2025-71384. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70