CVE-2025-8175

5.7 mediumEPSS 1.8%

Medium (5.7) in dlink di-8400 firmware. EPSS 1.8% chance of exploitation in the next 30 days.

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument share_enable leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

5.7 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWEs: CWE-476, CWE-404
Published: 2025-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:di-8400_firmware

References

https://github.com/Kriswu1337/CVE/blob/main/DI_8400%20Null%20pointer%20dereference%20vulnerability.md
https://vuldb.com/?ctiid.317589
https://vuldb.com/?id.317589
https://vuldb.com/?submit.621708
https://www.dlink.com/

Check your stack JSON