This vulnerability (CVE-2025-50664) affects the D-Link DI-8003 device running firmware 16.07.26A1. It is a buffer overflow (CWE-121) triggered by improper parameter handling in the /user_group.asp endpoint. An attacker can exploit this by sending a crafted HTTP GET request with parameters name, mem, pri, and attr, leading to a high-impact denial of service condition. The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact. No patch or official remediation has been documented yet.

Successful exploitation results in a denial of service condition on the affected device, impacting availability. There is no direct confidentiality or integrity impact reported. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected endpoint and monitoring for unusual HTTP GET requests targeting /user_group.asp with suspicious parameters. Avoid exposing the device management interface to untrusted networks.