How to fix EUVD-2025-209353?

Within 24 hours: Identify all D-Link DI-8003 devices in your network inventory and verify firmware version (check for 16.07.26A1). Restrict HTTP/HTTPS access to the /web_keyword.asp endpoint via firewall rules or network segmentation to untrusted networks. Within 7 days: Contact D-Link support for patch availability timeline and interim firmware recommendations; evaluate replacement models if patch is unavailable. Implement network-based rate limiting on HTTP GET requests to the affected endpoint. Within 30 days: Deploy replacement hardware or apply vendor patch immediately upon release; conduct network rescan to confirm all DI-8003 instances are remediated or isolated.

Is D-Link affected by EUVD-2025-209353?

CVE-2025-50665 affects D-Link DI-8003 routers (firmware 16.07.26A1) and enables unauthenticated attackers to remotely crash the device through malformed HTTP requests, rendering network infrastructure unavailable without user interaction.

EUVD-2025-209353

| CVE-2025-50665 HIGH

2026-04-08 mitre

GHSA-vgrj-r347-cwxq

7.5

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 08, 2026 - 19:31 vuln.today

EUVD ID Assigned

Apr 08, 2026 - 19:31 euvd

EUVD-2025-209353

CVE Published

Apr 08, 2026 - 00:00 nvd

HIGH 7.5

Description

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request via the name, en, time, mem_gb2312, and mem_utf8 parameters.

Analysis

Buffer overflow in D-Link DI-8003 router firmware 16.07.26A1 enables unauthenticated remote denial-of-service attacks through crafted HTTP GET requests to /web_keyword.asp endpoint. Attackers exploit improper input validation in name, en, time, mem_gb2312, and mem_utf8 parameters to trigger memory corruption, causing device unavailability. CVSS 7.5 (High) severity reflects network-accessible attack vector requiring no user interaction or privileges. No public exploit identified at time of analysis; low observed exploitation activity.

Technical Context

CWE-120 stack-based buffer overflow caused by insufficient bounds checking on user-supplied input to web management interface parameters. Vulnerability resides in legacy firmware web server parsing routines handling UTF-8 and GB2312 character encoding parameters, enabling memory overwrite conditions that crash device service availability without confidentiality or integrity impact per CVSS vector.

Affected Products

D-Link DI-8003 Gigabit VPN Router, firmware version 16.07.26A1. Vendor: D-Link Corporation. Specific CPE not available in vulnerability database records.

Remediation

No vendor-released patch identified at time of analysis. D-Link has not published specific firmware updates addressing CVE-2025-50665 in official security bulletins (https://www.dlink.com/en/security-bulletin/). Affected organizations should immediately isolate DI-8003 devices from untrusted networks, restrict web management interface access to trusted administrator IP ranges via firewall rules, and disable remote administration features if not operationally required. Monitor D-Link security bulletin page for future firmware releases. Consider replacement with actively supported hardware if device has reached end-of-life status. Consult vendor advisories and VulDB entry (https://vuldb.com/vuln/356313) for additional threat intelligence and potential vendor communications.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +38

POC: 0

EUVD-2025-209353 vulnerability details – vuln.today

Back

EUVD-2025-209353

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

EUVD-2025-209353

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code