VYPR

WIFI4 N300

by Dbit

CVEs (2)

  • CVE-2025-71384Oct 6, 2026
    risk 0.00cvss —epss —

    Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,

  • CVE-2025-71383Oct 6, 2026
    risk 0.00cvss —epss —

    Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occurs because of an error in a JSON parser.