Is there a public PoC exploit available for CVE-2025-8175?

Yes, a public proof-of-concept exploit is available for CVE-2025-8175. Prioritise patching immediately. EPSS: 0.2%.

Di 8400 Firmware CVE-2025-8175

Q: What is the CVSS score of CVE-2025-8175?

CVE-2025-8175 has a CVSS 4.0 base score of 5.7 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

MEDIUM

Improper Resource Shutdown or Release (CWE-404)

2025-07-26 cna@vuldb.com

Denial Of Service D-Link Di 8400 Firmware

5.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.7 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 19:13 vuln.today

CVE Published

Jul 26, 2025 - 03:15 cve.org

MEDIUM 5.7

DescriptionCVE.org

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument share_enable leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Denial of service in D-Link DI-8400 router firmware 16.07.26A1 allows authenticated remote attackers with low privileges to crash the device's jhttpd service by sending a crafted request to the usb_paswd.asp endpoint with a malicious share_enable parameter, triggering a null pointer dereference. Public exploit code is available, but no active exploitation has been reported and EPSS probability is low (0.21%).