High severity8.8NVD Advisory· Published May 27, 2025· Updated Jun 17, 2026

CVE-2025-5228

Description

A vulnerability was found in D-Link DI-8100 up to 20250523. It has been classified as critical. Affected is the function httpd_get_parm of the file /login.cgi of the component jhttpd. The manipulation of the argument notify leads to stack-based buffer overflow. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Di 8100 Firmware
cpe:2.3:o:dlink:di-8100_firmware:*:*:*:*:*:*:*:*
Range: <=20250523
Dlink/DI-8100llm-create2 versions
<=20250523+ 1 more
- (no CPE)range: <=20250523
- (no CPE)range: 20250523

Patches

Vulnerability mechanics

References

github.com/xubeining/Cve_report/blob/main/The%20D-Link%20DI-8100%20contains%20a%20binary%20vulnerability.mdnvdExploitThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
www.dlink.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000