VulnSocial

CVE-2025-52222Disclosure(dlink / di-8003)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip parameters in the radius_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

dlink CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • di-8003
  • di-8003_firmware
  • di-8003g
  • di-8003g_firmware

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-04-13)
  • 3 total mentions across 2 days

Affected systems

Vendors
dlink
Products
di-8003di-8003_firmwaredi-8003gdi-8003g_firmwaredi-8004wdi-8004w_firmwaredi-8100di-8100_firmwaredi-8100gdi-8100g_firmware

5 versions affected across 18 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-08: 1Mentions · 2026-04-13: 204-0804-13
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-081
Disclosure1
2026-04-132
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-52222 D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v… https://www.cve.org/CVERecord?id=CVE-2025-52222 ----- Traducción: CVE-2025-52222 D-L… http://infoflow.cloud`

    Post summary

    A brief tweet announcing CVE-2025-52222 and listing affected D‑Link router models, linking to the CVE record but providing no further technical, exploit, or mitigation details.

    00000145
    71 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-52222 D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v… https://www.cve.org/CVERecord?id=CVE-2025-52222

    Post summary

    The notice reports CVE-2025-52222 affecting multiple D-Link DI‑series devices with specified firmware versions, without providing further technical, patch, or exploitation details.

    00000220
    57.1K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    The severity is increased for this new vulnerability affecting D-Link DI-8003 and other products (CVE-2025-52222) https://vuldb.com/vuln/356309

    Post summary

    The post announces a new CVE‑2025‑52222 for D-Link DI‑8003 with increased severity, but gives no details on exploit code, active attacks, patches, or technical specifics.

    00000358
    2.1K followersView on X
CPE platform detail18 entries

18 of 18 entries

PartVendorProductVersionTarget SWTarget HW
HWdlinkdi-8003---
OSdlinkdi-8003_firmware16.07.26a1--
HWdlinkdi-8003g---
OSdlinkdi-8003g_firmware17.12.21a1--
HWdlinkdi-8004w---
OSdlinkdi-8004w_firmware16.07.26a1--
HWdlinkdi-8100---
OSdlinkdi-8100_firmware16.07.26a1--
HWdlinkdi-8100g---
OSdlinkdi-8100g_firmware17.12.20a1--
HWdlinkdi-8200a1--
OSdlinkdi-8200_firmware16.07.26a1--
HWdlinkdi-8200g---
OSdlinkdi-8200g_firmware17.12.20a1--
HWdlinkdi-8400a1--
OSdlinkdi-8400_firmware16.07.26a1--
HWdlinkdi-8500---
OSdlinkdi-8500_firmware16.07.26a1--

Explore more

Back to dashboarddlink CVEsdi-8003 vulnerabilities