CVE-2025-52222

CVE-2025-52222 is a buffer overflow vulnerability affecting multiple D-Link router models, including the DI-8003, DI-8500, DI-8200, DI-8400, and DI-8100 series across various firmware versions. The vulnerability exists in the radius_asp function and can be triggered through multiple parameters (rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip) via a crafted request. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating significant risk due to its network-based attack vector requiring no authentication or user interaction and low attack complexity. The impact is limited to denial of service, preventing legitimate use of affected devices, though it does not permit data compromise or unauthorized access. There is currently no evidence of active exploitation in the wild, with no public exploit code readily available and minimal community attention to date. The vulnerability remains relatively dormant with an EPSS score indicating lower exploitation probability compared to other known CVEs, suggesting limited immediate threat despite the high severity rating.