D-Link Di-8003 Firmware vulnerabilities

35 CVEs affecting D-Link Di-8003 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-50673, published 2026-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-52759, published 2024-11-19. Critical severity, CVSS 9.8. EPSS: 6% chance of exploitation in the next 30 days. D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.
CVE-2024-11046, published 2024-11-10. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the…
CVE-2024-11048, published 2024-11-10. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str…
CVE-2024-11047, published 2024-11-10. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The…
CVE-2024-52755, published 2024-11-21. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the host_ip parameter in the ipsec_road_asp function.
CVE-2024-52757, published 2024-11-20. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in the arp_sys_asp function.
CVE-2024-52754, published 2024-11-20. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function.
CVE-2025-50664, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /user_group.asp endpoint. The attacker can exploit this vulnerability by sending a…
CVE-2025-50661, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /url_rule.asp endpoint. An attacker can exploit this vulnerability by…
CVE-2025-50666, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint. An attacker can exploit this vulnerability by…

Latest

CVE-2025-50673, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the http_lanport parameter in the /webgl.asp endpoint.
CVE-2025-50672, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxz_dlink.asp endpoint.
CVE-2025-50671, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_ref.asp endpoint. An attacker can exploit this vulnerability by sending a…
CVE-2025-50670, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint. An attacker can exploit this vulnerability by sending a…
CVE-2025-50669, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 and DI-8003G 19.12.10A1 due to improper handling of the wan_ping parameter in the /wan_ping.asp endpoint.
CVE-2025-50668, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the s parameter in the /web_list_opt.asp endpoint.
CVE-2025-50667, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the iface parameter in the /wan_line_detection.asp endpoint.
CVE-2025-50665, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vulnerability by…