CVE 7.1 HIGH

D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference_CVE-2025-8175

7.1 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument share_enable leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Basic Information

ID CVE-2025-8175
Source VulDB
Published Jul 26, 2025 at 03:02
Modified Jul 28, 2025 at 15:59

Affected Product

Vendor D-Link
Product DI-8400
Version 16.07.26A1
Affected Versions D-Link DI-8400 16.07.26A1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.