CVE-2025-8175 — MEDIUM (6.5)

Vulnerability Description

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument share_enable leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Dlink	Di-8400 Firmware	16.07.26a1
Dlink	Di-8400	a1

Related Weaknesses (CWE)

CWE-404 CWE-476

References

https://github.com/Kriswu1337/CVE/blob/main/DI_8400%20Null%20pointer%20dereferenExploit
https://vuldb.com/?ctiid.317589Permissions RequiredVDB Entry
https://vuldb.com/?id.317589Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.621708Third Party AdvisoryVDB Entry
https://www.dlink.com/Product
https://github.com/Kriswu1337/CVE/blob/main/DI_8400%20Null%20pointer%20dereferenExploit

FAQ

What is CVE-2025-8175?

CVE-2025-8175 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the a...

How severe is CVE-2025-8175?

CVE-2025-8175 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-8175?

Check the references section above for vendor advisories and patch information. Affected products include: Dlink Di-8400 Firmware, Dlink Di-8400.