CVE-2025-11339

CWE-119 — Buffer OverflowCWE-120 — Classic Buffer Overflow4 documents4 sources
Severity
7.4HIGH
EPSS
0.5%
top 33.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
D-link Di-7100g C1Dlink Di-7100g C1 Firmware
Timeline
PublishedOct 6

Description

A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub_4BD4F8 of the file /webchat/hi_block.asp of the component jhttpd. The manipulation of the argument popupId leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5d-link/di-7100g_c120250928

🔴Vulnerability Details

2
GHSA
GHSA-j435-57wh-f697: A vulnerability has been found in D-Link DI-7100G C1 up to 20250928↗2025-10-06
▶
CVEList
D-Link DI-7100G C1 jhttpd hi_block.asp sub_4BD4F8 buffer overflow↗2025-10-06
▶

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS D-Link hi_block.asp Multiple Parameters Buffer Overflow Attempt (CVE-2025-11338, CVE-2025-11339)↗2025-10-06
▶