Vulnerability Description
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Di-7100G C1 Firmware | 2025-09-28 |
| Dlink | Di-7100G C1 | - |
Related Weaknesses (CWE)
References
- https://vuldb.com/?ctiid.327221Permissions RequiredVDB Entry
- https://vuldb.com/?id.327221Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.664619Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
- https://www.yuque.com/jh0ng/vmpda6/kggo2ngrcphzvwmlPermissions Required
FAQ
What is CVE-2025-11338?
CVE-2025-11338 is a vulnerability with a CVSS score of 8.8 (HIGH). A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the arg...
How severe is CVE-2025-11338?
CVE-2025-11338 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-11338?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Di-7100G C1 Firmware, Dlink Di-7100G C1.