What is the CVSS score of CVE-2025-50670?

CVE-2025-50670 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of D-Link are affected by CVE-2025-50670?

CVE-2025-50670 affects D-Link DI-8003 routers running firmware 16.07.26A and earlier, allowing unauthenticated remote attackers to crash the device via malformed HTTP requests.

How to fix or mitigate CVE-2025-50670?

Within 24 hours: Inventory all D-Link DI-8003 devices in production and identify firmware versions via device management interface or SSH console. Within 7 days: Contact D-Link support to confirm firmware availability beyond 16.07.26A1; if no patch exists, implement network segmentation to restrict HTTP access to the /xwgl_bwr.asp endpoint using firewall rules. Within 30 days: Deploy compensating controls (see below) or plan device replacement if D-Link does not release patched firmware.

D-Link CVE-2025-50670

EUVD-2025-209360 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-08 mitre

GHSA-rg42-2jgq-39w3

D-Link Buffer Overflow

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Apr 08, 2026 - 19:31 euvd

EUVD-2025-209360

Analysis Generated

Apr 08, 2026 - 19:31 vuln.today

CVE Published

Apr 08, 2026 - 00:00 nvd

HIGH 7.5

DescriptionCVE.org

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in the name, qq, and time parameters.

AnalysisAI

Buffer overflow in D-Link DI-8003 router firmware 16.07.26A1 enables unauthenticated remote attackers to trigger denial-of-service conditions via crafted HTTP GET requests to /xwgl_bwr.asp endpoint. Exploitation occurs through oversized name, qq, or time parameters causing memory corruption. CVSS score 7.5 reflects high availability impact without confidentiality or integrity compromise. No public exploit identified at time of analysis, with low observed exploitation activity (EPSS <1%).

Technical ContextAI

CWE-120 classic stack-based buffer overflow in embedded web server handler. Vulnerability originates from missing input validation on GET parameters processed by xwgl_bwr.asp endpoint, allowing attacker-controlled data to exceed allocated buffer boundaries. CVSS vector AV:N/AC:L/PR:N indicates remotely exploitable without authentication or complex conditions.

RemediationAI

No vendor-released patch identified at time of analysis. D-Link has not published firmware updates addressing CVE-2025-50670 for DI-8003 16.07.26A1 as of current advisories. Monitor D-Link Security Bulletin (https://www.dlink.com/en/security-bulletin/) for future firmware releases. Immediate mitigations: restrict administrative interface access via firewall rules permitting only trusted IP ranges, disable remote management features if not operationally required, deploy network segmentation isolating affected devices from untrusted networks. Consider device replacement if end-of-life status prevents patching. Reference VulDB advisory https://vuldb.com/vuln/356346 for additional technical details.