Improper ID Parameter Handling in D-Link DI-8003
CVE-2025-50652

7.5HIGH

Key Information:

Vendor

D-Link
Status
DI-8003
Vendor
CVE Published:
8 April 2026

What is CVE-2025-50652?

A vulnerability exists in the D-Link DI-8003 router due to improper handling of the 'id' parameter within the /saveparm_usb.asp endpoint. This flaw could potentially allow an attacker to exploit the system by sending crafted requests, leading to unauthorized access or manipulation of sensitive settings. Users are advised to apply security patches and follow best practices to mitigate risks associated with this vulnerability.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/xiaotea/iot-vulnerability-collection/b...
https://supportannouncement.us.dlink.com/security/publica...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.