This vulnerability affects the D-Link DI-8100 router running firmware version 16.07.26A1. The issue lies in the tggl_asp function within the /tggl.asp HTTP handler, where improper handling of the 'Name' argument leads to a buffer overflow condition. The vulnerability can be exploited remotely without user interaction or privileges. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability at a high level. Although exploit code is publicly available, there is no vendor-provided patch or official remediation guidance currently documented.

Successful exploitation of this buffer overflow vulnerability can lead to remote code execution or denial of service on the affected device, compromising confidentiality, integrity, and availability. The vulnerability requires no privileges or user interaction and can be triggered remotely over the network, increasing the risk of exploitation. The availability of public exploit code further raises the threat level. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, such as restricting access to the management interface from untrusted networks. Monitor vendor channels for updates and apply patches promptly once available.