CVE-2025-8175CWE-404CWE-476

D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference

High · published July 26, 2025

CVSS v4.0
7.1
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument share_enable leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01699 · 77.0th percentile
Weaknesses
CWE-404 · Improper Resource Shutdown or Release; CWE-476 · NULL Pointer Dereference
Published
2025-07-26T03:02Z
EPSS history
Timeline
  • 26 JUL 03:02Z
    D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference
    cvelistv5