Severity
High
Analysis Summary
CVE-2025-28395 CVSS:8.8
D-LINK DI-8100 is vulnerable to a buffer overflow, caused by improper bounds checking by the ipsec_road_asp function via the host_ip parameter.
CVE-2025-28398 CVSS:8.8
D-LINK DI-8100 is vulnerable to a buffer overflow, caused by improper bounds checking by the ipsec_net_asp function via the remot_ip parameter.
Impact
- Buffer Overflow
Indicators of Compromise
CVE
CVE-2025-28395
CVE-2025-28398
Affected Vendors
- D-Link
Affected Products
- D-Link DI-8100 - 16.07.26A1
Remediation
Refer to the D-Link Website for patch, upgrade, or suggested workaround information.