This vulnerability affects the D-Link DI-8400 router running firmware version 16.07. It is a stack-based buffer overflow in the Web Administration Service's menu_nat_more_asp function within the menu_nat_more.asp file. The vulnerability is triggered by remote manipulation of the 'opt' argument, allowing an attacker to overflow the stack buffer. The CVSS 4.0 score is 9.4 (critical), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, availability, and security requirements. Exploit code has been publicly released, but there is no vendor advisory or patch information available at this time.

Successful exploitation can lead to remote code execution or denial of service on the affected device, compromising the confidentiality, integrity, and availability of the system. Given the critical CVSS score and public exploit availability, this vulnerability poses a significant risk to affected devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's web administration interface from untrusted networks and monitor for suspicious activity related to the 'opt' parameter. Avoid exposing the management interface to the internet.