CVE-2025-11408 is a High severity (CVSS 8.8) flaw in the D-Link DI-7001 MINI router: a buffer overflow through the str argument of the dbsrv.asp page. The record names firmware 24.04.18B1 and lists no patched version, so restrict the management interface and check D-Link's support pages.
What's affected
The record lists the D-Link DI-7001 MINI at firmware 24.04.18B1. The affected page is /dbsrv.asp and the argument is str. The weakness types are CWE-119 (improper restriction of operations within a memory buffer) and CWE-120 (classic buffer overflow). The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
The record states that the exploit has been made public. It does not report attacks in the wild, and the CVE is not in CISA KEV. The record also names no fixed firmware, and the public issue report in the record is a researcher write up rather than a vendor notice. Check D-Link's security bulletins and the product support page for firmware newer than 24.04.18B1.
Two CVEs on this device were published in the same period: CVE-2025-11407 (OS command injection) and CVE-2025-11408 (buffer overflow). Treat them together when you plan.
How to check if you're exposed
Sign in to the device's web interface and read the firmware version on the status or system page. If it reads 24.04.18B1, you are on the version named in the record.
Then check where the management interface listens. Look at your firewall and the device's remote management setting to see whether the web interface answers from the internet. Note that the record's description says the issue is reachable remotely, so also check any rules that forward ports to the device.
What to do now
- Inventory every DI-7001 MINI and note each firmware version.
- Turn off remote management from the internet. Allow the web interface only from a management network or a VPN.
- Check D-Link's security bulletins for a patched firmware, and apply it once published.
- Review the device's admin accounts and change the administrator password.
- If no fix is published, plan a replacement for any unit that faces untrusted networks.
Why it matters
A buffer overflow happens when a program writes more data into a fixed memory area than it can hold. The extra data spills into neighboring memory and can crash the service or, in worse cases, change what the device executes. The durable fix is bounds checking in the firmware, which only the vendor can ship.
The record scores this one High (8.8). The impact metrics are all high, so a successful attack could affect the device's confidentiality, integrity and availability. Because no fixed firmware is listed, your best controls today are network ones.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Can I patch this myself?
No. The flaw is in the device firmware, so only D-Link can fix it. Until a fixed firmware exists, restrict who can reach the management interface.
Is it exploited in the wild?
The record says an exploit has been made public, but it does not report attacks and the CVE is not in CISA KEV.
Sources
- Public issue report for CVE-2025-11408
- NVD record for CVE-2025-11408 (description, CVSS vector, CWEs)
If you want to see which software in your own estate has known issues, run the free in-browser dependency scan.
Last reviewed: 19 October 2026.
