CVE-2025-52222 affects various D-Link router models including DI-8003, DI-8500, DI-8003G, DI-8200G, DI-8200, DI-8400, DI-8004w, DI-8100, and DI-8100G with specific firmware versions. The vulnerability is a buffer overflow triggered through the rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip parameters in the radius_asp function. Exploitation leads to Denial of Service by causing the device to crash or become unresponsive. There is no known exploit in the wild and no official remediation or patch has been disclosed.

Successful exploitation results in a Denial of Service condition on affected D-Link devices, potentially disrupting network connectivity or device availability. There is no information indicating privilege escalation, data leakage, or remote code execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit exposure of affected devices to untrusted networks and monitor for unusual device behavior. No official fix or workaround has been published at this time.