CVE-2025-8175: d-link di-8400 Improper Resource Shutdown or Release

Vulnerability summary

CVE-2025-8175 is a high (CVSS 7.5) Improper Resource Shutdown or Release vulnerability in d-link di-8400. EPSS estimates a 1.70% chance of exploitation in the next 30 days, higher than 76.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 26-07-2025
   PublishedVulnerability first disclosed.
2. 28-07-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument share_enable leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-404Improper Resource Shutdown or ReleaseThe product does not release or incorrectly releases a resource before it is made available for re-use.
• CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.