CVE-2025-71384

MediumCVSS 6.7

Published: 06/10/2026(UTC)Updated: 07/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

Dbit WIFI4 N300 devices version 1.0.0 allow administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field.

Risk Assessment

An administrator from the local Wi-Fi network can execute arbitrary system commands on the device, potentially leading to full device compromise and possibly network compromise.

Recommendation

Upgrade the Dbit WIFI4 N300 firmware to the latest version if a patch is available. Restrict admin panel access to trusted administrators only.

Other vulnerabilities in Dbit WIFI4 N300

CVE-2025-71383Critical
Dbit WIFI4 N300 devices version 1.0.0 allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occurs because of an error in a JSON parser.

Original NVD description (English source)

Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,

Vulnerability data from NVD (NIST) · CISA KEV · EPSS