Unrated severityNVD Advisory· Published Oct 6, 2025· Updated Oct 6, 2025
D-Link DI-7100G C1 jhttpd login.cgi sub_4C0990 buffer overflow
CVE-2025-11338
Description
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected products
2- D-Link/DI-7100G C1v5Range: 20250928
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.yuque.com/jh0ng/vmpda6/kggo2ngrcphzvwmlmitreexploit
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
- www.dlink.commitreproduct
News mentions
0No linked articles in our index yet.