CVE-2025-50652

CVE-2025-50652 is an improper parameter handling vulnerability affecting D-Link DI-8003 firmware version 16.07.26A1, specifically in the /saveparm_usb.asp endpoint where the id parameter is inadequately validated. The vulnerability carries a HIGH severity rating with a CVSS score of 7.5, reflecting its network-accessible nature, low attack complexity, and requirement for no authentication or user interaction. The primary impact is denial of service, as the vulnerability allows unauthenticated remote attackers to degrade system availability, though confidentiality and integrity are not compromised. Exploitation activity is currently minimal, with no known public exploits documented and the vulnerability absent from the Known Exploited Vulnerabilities catalog, suggesting limited real-world targeting at present. Community attention remains low given the inactive hot list status, though the vulnerability warrants patching as part of standard vulnerability management practices.