CVE-2025-50665

CVE-2025-50665 is a buffer overflow vulnerability affecting D-Link DI-8003 version 16.07.26A1 in the /web_keyword.asp endpoint. The flaw stems from improper input validation of multiple parameters (name, en, time, mem_gb2312, and mem_utf8), allowing attackers to trigger the vulnerability through specially crafted HTTP GET requests. The vulnerability carries a CVSS severity score of 7.5 (HIGH) with a network-based attack vector requiring no authentication or user interaction. The attack complexity is low, meaning exploitation does not require specialized conditions. While the vulnerability does not compromise confidentiality or integrity, it poses a significant availability risk through potential denial of service. Exploitation of this vulnerability is not currently documented in the wild. The vulnerability is not listed on CISA's Known Exploited Vulnerabilities (KEV) catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.0008 and FAUCET risk score of 38.0/100 suggest low probability of near-term exploitation relative to other published vulnerabilities, indicating this remains a moderate-priority patching requirement for affected organizations.