A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file_exten_asp of the file file_exten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.3 · dlinkNVD modified 2026-10-26 22:10
Affected (CPE criteria) 1
cpe:2.3:o:dlink:di-8100_firmware:16.07.26a1:*:*:*:*:*:*:*
References 5
- https://github.com/draw-ctf/report/blob/main/DI-8100/file_exten_asp_overflow.md Exploit, Third Party Advisory
- https://vuldb.com/submit/802868 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/359856 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/359856/cti Permissions Required, VDB Entry
- https://www.dlink.com/ Product