This vulnerability affects the D-Link DI-8100 router running firmware version 16.07.26A1. The issue is a buffer overflow in the File Extension Handler component, specifically in the file_exten_asp function of file_exten.asp. An attacker can manipulate the 'Name' argument to trigger the overflow remotely. The CVSS 4.0 base score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the device is not a cloud service, so remediation depends on vendor action.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The high CVSS score reflects significant impact on confidentiality, integrity, and availability. However, there is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device and monitor for any updates from D-Link regarding patches or firmware updates addressing this issue.