Buffer Overflow in D-Link DI-8003 pppoe_list_opt.asp Endpoint

Publication date: 2026-04-08

Last updated on: 2026-04-22

Assigner: MITRE

Description

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-08

Last Modified

2026-04-22

Generated

2026-07-06

AI Q&A

2026-04-08

EPSS Evaluated

2026-07-05

NVD

CVE-2025-50645

EUVD

EUVD-2025-209323

Affected Vendors & Products

Vendor	Product	Version / Range
dlink	di-8003_firmware	16.07.26a1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the D-Link DI-8003 device, specifically in version 16.07.26A1. It occurs when the 's' parameter in the pppoe_list_opt.asp endpoint is manipulated by an attacker. By sending a specially crafted request with an excessively large value for this parameter, the attacker can cause a buffer overflow.

Impact Analysis

The buffer overflow caused by this vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial of service on the affected device. This could lead to unauthorized access, disruption of network services, or compromise of the device's functionality.

Hi! I’m here to help you understand CVE-2025-50645. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70