A stack-based buffer overflow vulnerability in the D-Link DI-8100 administrative interface allows authenticated attackers to execute arbitrary code or cause a denial of service.

This flaw is a stack-based buffer overflow (CWE-121) located in the sprintf function within the yyxz.asp endpoint, triggered by manipulating the id parameter with valid administrative credentials.

A successful exploit of this vulnerability can result in total compromise of the affected routing device, leading to severe network disruption, unauthorized interception of traffic, or complete loss of administrative control. The CVSS score of 7.2 reflects high technical severity due to the potential for complete confidentiality, integrity, and availability impact, though mitigated slightly by the requirement for administrative authentication.

Immediate Action: Restrict administrative access to trusted internal management networks only, and disable external web management interfaces until a vendor-supplied firmware update is available.

Proactive Monitoring: Monitor device availability and system logs for unexpected reboots, HTTP service crashes, or anomalous HTTP POST requests directed at the yyxz.asp endpoint.

Compensating Controls: Implement strict network segmentation and access control lists to prevent unauthorized hosts from reaching the router management interface.

Public Exploit Available: Yes, a public proof-of-concept exists in the referenced GitHub write-up.

Organizations utilizing the D-Link DI-8100 router must treat this high-severity vulnerability with urgency. Given the presence of a public proof-of-concept and the potential for total system compromise, administrators should immediately restrict management interface exposure and apply vendor patches as soon as they are released.