CVE-2025-33079 – IBM Controller Vulnerability
May 27, 2025North Korean APT Kimsuky aka Black Banshee – Active IOCs
May 27, 2025CVE-2025-33079 – IBM Controller Vulnerability
May 27, 2025North Korean APT Kimsuky aka Black Banshee – Active IOCs
May 27, 2025Severity
High
Analysis Summary
CVE-2025-5228
A vulnerability was found in D-Link DI-8100. It has been classified as critical. Affected is the function httpd_get_parm of the file /login.cgi of the component jhttpd. The manipulation of the argument notify leads to stack-based buffer overflow. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.
Impact
- Buffer Overflow
Indicators of Compromise
CVE
CVE-2025-5228
Affected Vendors
- D-Link
Affected Products
- D-Link DI-8100
Remediation
Refer to the D-Link Website for patch, upgrade, or suggested workaround information.