CVE-2018-25125 - Netis DL4322D RTK 2.1.1 FTP Service DoS

Back Back to CVE browser

HIGH

Netis DL4322D RTK 2.1.1 FTP Service DoS

Published Nov 14, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.49%

Description

Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument causes the service, and in practice the router, to crash or become unresponsive, resulting in a loss of availability for the device and connected users.

Affected products

Vendor Netis Systems Co., Ltd. Product n/a Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=RTK 2.1.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Netis Systems Co., Ltd.

n/a

Version	Status	Constraints
0	affected	<=RTK 2.1.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-21612
Advisory
https://web.archive.org/web/20180731191918/http://www.netis-systems.com/Home/detail/id/74.html
product
https://www.exploit-db.com/exploits/45424
exploit
https://www.netis-systems.com/
product
https://www.vulncheck.com/advisories/netis-dl4322d-ftp-service-dos
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-21612		Advisory
https://web.archive.org/web/20180731191918/http://www.netis-systems.com/Home/detail/id/74.html		product
https://www.exploit-db.com/exploits/45424		exploit
https://www.netis-systems.com/		product
https://www.vulncheck.com/advisories/netis-dl4322d-ftp-service-dos		third-party-advisory