What is the CVSS score of CVE-2025-50645?

CVE-2025-50645 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-50645?

Within 24 hours: Identify all D-Link DI-8003 devices in production inventory and document current firmware versions via management interface or physical access. Within 7 days: Contact D-Link support to confirm firmware availability status and escalation timeline; implement network segmentation to restrict direct internet access to affected routers using firewall rules blocking external traffic to pppoe_list_opt.asp endpoint. Within 30 days: Deploy replacement router hardware or request expedited firmware release from D-Link; if replacement unavailable, maintain isolation rules and increase monitoring for anomalous traffic patterns to affected devices.

N A CVE-2025-50645

EUVD-2025-209323 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-08 mitre

GHSA-p8cj-q9g4-r46p

Buffer Overflow D-Link N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 16:22 vuln.today

cvss_changed

EUVD ID Assigned

Apr 08, 2026 - 19:31 euvd

EUVD-2025-209323

Analysis Generated

Apr 08, 2026 - 19:31 vuln.today

CVE Published

Apr 08, 2026 - 00:00 nvd

HIGH 7.5

DescriptionCVE.org

A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow condition.

AnalysisAI

Buffer overflow in D-Link DI-8003 router firmware 16.07.26A1 enables unauthenticated remote denial of service attacks. Attackers can trigger memory corruption by submitting oversized 's' parameter values to the pppoe_list_opt.asp endpoint without authentication, causing device unavailability. CVSS 7.5 severity reflects network-accessible attack vector with low complexity. No public exploit identified at time of analysis. Low observed exploitation activity (EPSS 0.02%).

Technical ContextAI

CWE-120 classic stack-based buffer overflow in web management interface parameter handling. The pppoe_list_opt.asp endpoint performs inadequate bounds checking on user-supplied 's' parameter before memory copy operations, allowing heap/stack corruption. Network-reachable attack surface (AV:N) with no privilege requirements (PR:N) enables trivial exploitation against internet-facing devices.

RemediationAI

No vendor-released patch identified at time of analysis. D-Link has not published firmware updates for DI-8003 addressing CVE-2025-50645 according to official security bulletin (https://www.dlink.com/en/security-bulletin/). Recommended immediate actions: (1) isolate affected DI-8003 devices from untrusted networks using firewall rules; (2) disable remote administration interfaces if business requirements permit; (3) implement strict network segmentation to prevent internet exposure of management endpoints; (4) monitor vendor advisory page for future firmware releases. Organizations requiring PPPoE functionality should evaluate migration to actively-maintained hardware platforms. Rate-limit HTTP requests to management interfaces as temporary containment.