CVE-2025-71383: n/a

This vulnerability in Dbit WIFI4 N300 1.0.0 devices allows an attacker on the local Wi-Fi network to crash the management interface by sending a malformed request missing the username or password field in the /api/login endpoint. The root cause is an error in the JSON parser that processes these login requests, leading to a denial of service condition.

An attacker with local Wi-Fi access can cause a denial of service by crashing the management interface, potentially disrupting device management and configuration until the device is restarted or recovers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local network access to the management interface and monitor for unusual requests targeting /api/login.