CVE-2025-52222 describes a buffer overflow vulnerability in multiple D-Link router models within the radius_asp function. The flaw is triggered via the rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip parameters. Exploitation can cause a Denial of Service (DoS) by crashing or destabilizing the device. The vulnerability is classified under CWE-120 (Classic Buffer Overflow). The CVSS v3.1 base score is 7.5, with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to availability. There is no vendor advisory or patch information available, and no known exploits have been observed.

Successful exploitation results in a Denial of Service condition, causing affected D-Link routers to become unavailable or unstable. There is no indication of confidentiality or integrity impact. The vulnerability can be exploited remotely without authentication, increasing risk. However, no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, network administrators should consider limiting exposure of affected devices to untrusted networks and monitor for unusual device behavior. No official fix or temporary workaround has been published.