CVE-2025-71383

CriticalCVSS 9.8

Published: 06/10/2026(UTC)Updated: 08/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Dbit WIFI4 N300 devices version 1.0.0 allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occurs because of an error in a JSON parser.

Risk Assessment

An attacker from the local Wi-Fi network can crash the management interface, leading to unavailability of device management and potential network disruption.

Recommendation

Upgrade the Dbit WIFI4 N300 firmware to the latest version if a patch is available. Additionally, secure access to the management interface.

Other vulnerabilities in Dbit WIFI4 N300

CVE-2025-71384Medium
Dbit WIFI4 N300 devices version 1.0.0 allow administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field.

Original NVD description (English source)

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occurs because of an error in a JSON parser.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS