CVE-2025-71383

Summary

The flaw allows the management interface of Dbit WIFI4 N300 1.0.0 devices to crash via a local Wi-Fi request missing the username or password field, due to an error in the JSON parser.

Exploitability

Exploitation is relatively easy as it requires only a local Wi-Fi network access and a crafted request without the necessary fields.

Blast radius

If exploited, this could lead to a complete denial of service for the management interface, impacting device management and configuration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to the management interface to prevent unauthorized requests.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.