BaseFortify

Publication date: 2025-11-14

Last updated on: 2025-11-14

Assigner: VulnCheck

Description

Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument causes the service, and in practice the router, to crash or become unresponsive, resulting in a loss of availability for the device and connected users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-14

Last Modified

2025-11-14

Generated

2026-07-06

AI Q&A

2025-11-15

EPSS Evaluated

2026-07-05

NVD

CVE-2018-25125

Affected Vendors & Products

Vendor	Product	Version / Range
netis	adsl_router_dl4322d	2.1.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow in the embedded FTP service of the Netis ADSL Router DL4322D firmware RTK 2.1.1. An authenticated remote user can exploit this by sending an FTP command like ABOR with an excessively long argument, which causes the FTP service and the router to crash or become unresponsive.

Impact Analysis

Exploiting this vulnerability results in a denial of service, causing the router and its FTP service to crash or become unresponsive. This leads to a loss of availability for the device and all users connected to it.

Hi! I’m here to help you understand CVE-2018-25125. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70