ID
VAR-202507-0252
CVE
CVE-2025-7194
TITLE
D-Link Systems, Inc. of DI-500WF Buffer error vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file ip_position.asp of the component jhttpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. D-Link Systems, Inc. of DI-500WF The firmware contains a buffer error vulnerability and a stack-based buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The D-Link DI-500WF is a panel-mounted wireless access point (AP) designed according to international wireless standards. It supports the 2.4GHz frequency band and offers wireless transmission speeds of up to 300Mbps, making it environmentally friendly. The D-Link DI-500WF suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to execute remote code
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dlink | model: | di-500wf | scope: | eq | version: | 17.04.10a1t | Trust: 1.0 |
| vendor: | d link | model: | di-500wf | scope: | - | version: | - | Trust: 0.8 |
| vendor: | d link | model: | di-500wf | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | d link | model: | di-500wf | scope: | eq | version: | di-500wf firmware 17.04.10a1t | Trust: 0.8 |
| vendor: | d link | model: | d-link di-500wf 17.04.10a1t | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Stack-based buffer overflow (CWE-121) [ others ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-7194 | Trust: 3.2 |
| db: | VULDB | id: | 315133 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2025-010246 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-18555 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/bigmancer/cve/issues/1 | Trust: 1.8 |
| url: | https://vuldb.com/?id.315133 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.607311 | Trust: 1.8 |
| url: | https://www.dlink.com/ | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-7194 | Trust: 1.4 |
| url: | https://vuldb.com/?ctiid.315133 | Trust: 1.0 |
SOURCES
| db: | CNVD | id: | CNVD-2025-18555 |
| db: | JVNDB | id: | JVNDB-2025-010246 |
| db: | NVD | id: | CVE-2025-7194 |
LAST UPDATE DATE
2025-08-18T23:04:19.023000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-18555 | date: | 2025-08-15T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010246 | date: | 2025-07-30T08:36:00 |
| db: | NVD | id: | CVE-2025-7194 | date: | 2025-07-14T15:14:48.423 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-18555 | date: | 2025-08-14T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010246 | date: | 2025-07-30T00:00:00 |
| db: | NVD | id: | CVE-2025-7194 | date: | 2025-07-08T21:15:29.763 |