CVE-2025-57637

HIGH EPSS 44.7%

Published Sep 23, 20259mo ago · Modified Jun 17, 20261w ago

7.5 CVSS 3.1

High

Published Sep 23, 2025 9mo ago

Last Modified Jun 17, 2026 1w ago

Description

Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the viav4 parameter allowing attackers to cause a denial of service or execute arbitrary code.

CVSS Details

Base Score

7.5

Exploitability

3.9

Impact

3.6

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

44.7% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-122

Affected Products 2

Vendor	Product	Version	Range
dlink	di-7100g_firmware	2020-02-21c1	any
dlink	di-7100g	*	any

References 2

github.com https://github.com/glkfc/IoT-Vulnerability/blob/main/D-Link/Dlink_2.md

ExploitThird Party Advisory
dlink.com https://www.dlink.com/en/security-bulletin/

Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.