A stack-based buffer overflow occurs in the /api/addStaticDHCP comment field, enabling administrators who are connected to the local Wi‑Fi network to execute arbitrary operating system commands on the device. This flaw can lead to full system compromise, granting attackers full control over the affected device.

Dbit Wi‑Fi4 N300 1.0.0 devices are impacted. No other affected versions are listed.

The vulnerability is exploitable from the local network, which may be common in home or small‑business environments. Although EPSS data are not available and the flaw is not listed in CISA KEV, the nature of the exploit and its ability to execute arbitrary commands suggest a high likelihood of abuse if the device is reachable. The lack of a public CVSS score underscores the need for caution due to the severity of possible outcomes.