CVE-2025-11338 | D-Link DI-7100G C1 up to 20250928 jhttpd /webchat/login.cgi sub_4C0990 openid buffer overflow

A vulnerability described as critical has been identified in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow.

This vulnerability is registered as CVE-2025-11338. It is possible to launch the attack remotely. Furthermore, an exploit is available.