D-Link Di-8300 Firmware vulnerabilities

5 CVEs affecting D-Link Di-8300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-45059, published 2026-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-44411, published 2024-09-09. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the msp_info_htm function.
CVE-2024-44410, published 2024-09-09. Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days. D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.
CVE-2025-45059, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a…
CVE-2025-45058, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a…
CVE-2025-45057, published 2026-04-08. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via…