This vulnerability involves a buffer overflow in the NMBD_process function of the sserver.c file within the nmbd component on D-Link DIR-825 routers running firmware version 3.00b32. The flaw allows an attacker with local network access to cause a buffer overflow, potentially leading to denial of service or arbitrary code execution. The product affected is out of vendor support, and no official fix or mitigation has been provided. The CVSS 4.0 score is 8.7, indicating high severity with local attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to a buffer overflow condition that may allow an attacker on the local network to disrupt device operation or execute arbitrary code with high impact on confidentiality, integrity, and availability. Since the device is no longer supported, the vulnerability remains unpatched, increasing risk for affected deployments.

No official patch or remediation is available as the affected product is no longer supported by the vendor. Network administrators should restrict local network access to trusted users only and consider replacing the affected device with a supported model to mitigate risk. Monitor for unusual activity on the local network segment where the device operates.