Dlink Di 8003 vulnerabilities, page 2
35 vulnerabilities
Known vulnerabilities in Dlink Di 8003, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-50661dlinkdi-8003_firmware
EPSS score0.60%
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /url_rule.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, en, ips, u, time, act, rpri, and log.CVE-2025-50649dlinkdi-8003_firmwareEPSS score0.52%
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint.CVE-2025-50645dlinkdi-8003_firmwareEPSS score0.52%
A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow condition.CVE-2025-50668dlinkdi-8003_firmwareEPSS score0.41%
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /web_list_opt.asp endpoint.CVE-2025-50666dlinkdi-8003_firmwareEPSS score0.60%
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, user_id, log, and time.CVE-2025-50652dlinkdi-8003_firmwareEPSS score0.47%
An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint.CVE-2025-50665dlinkdi-8003_firmwareEPSS score0.60%
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request via the name, en, time, mem_gb2312, and mem_utf8 parameters.CVE-2025-50644dlinkdi-8003_firmwareEPSS score0.52%
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.CVE-2024-52759dlinkdi-8003_firmwareEPSS score5.98%
D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.CVE-2024-52757dlinkdi-8003_firmwareEPSS score0.64%
D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in the arp_sys_asp function.CVE-2024-52754dlinkdi-8003_firmwareEPSS score0.61%
D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function.CVE-2024-52755dlinkdi-8003_firmwareEPSS score0.81%
D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the host_ip parameter in the ipsec_road_asp function.CVE-2024-11048d-linkdi-8003+1EPSS score1.21%
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2024-11046d-linkdi-8003+1EPSS score4.37%
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2024-11047d-linkdi-8003+1EPSS score1.21%
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.