Dlink vulnerabilities

CVE-2025-60698 High · 7.3 CWE-77 Nov 13, 2025

Command Injection in Dlink Dir-882 Firmware

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_432F60` function in `prog.cgi` stores user-supplied `SetSysLogSettings/IPAddress` values in NVRAM via `nvram_safe_set("SysLogRemote_IPAddress", ...)`. These values are later retrieved in the `sub_448DCC` function of `rc` using `nvram_safe_get` and concatenated into a shell command executed via `twsystem()` without any sanitization. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router's web interface.

CVE-2025-60697 High · 7.3 CWE-77 Nov 13, 2025

Command Injection in Dlink Dir-882 Firmware

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_4438A4` function in `prog.cgi` stores user-supplied DDNS parameters (`ServerAddress` and `Hostname`) in NVRAM via `nvram_safe_set`. These values are later retrieved in the `start_DDNS_ipv4` function of `rc` using `nvram_safe_get` and concatenated into DDNS shell commands executed via `twsystem()` without proper sanitization. Partial string comparison is performed but is insufficient to prevent command injection. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router's web interface.

CVE-2025-60671 Medium · 5.4 CWE-77 Nov 13, 2025

Command Injection in Dlink Dir-823g Firmware

A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linux_vlan_reinit file. The vulnerability occurs because content read from this file is only partially validated for a prefix and then formatted using vsnprintf() before being executed with system(), allowing an attacker with write access to /var/system/linux_vlan_reinit to execute arbitrary commands on the device.

CVE-2022-50596 Critical · 9.8 CWE-78 Nov 6, 2025

D-Link DIR-1260 <= v1.20B05 GetDeviceSettings Unauthenticated Command Injection

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within the SetDest/Dest/Target arguments to the GetDeviceSettings form. The management interface is accessible over HTTP and HTTPS on the local and Wi-Fi networks and optionally from the Internet.

CVE-2018-25120 Critical · 9.8 CWE-78 Oct 29, 2025

D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.

CVE-2025-12313 Critical · 9.8 CWE-77 Oct 27, 2025

D-Link DI-7001 MINI msp_info.htm command injection

A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-12296 Critical · 9.8 CWE-78 Oct 27, 2025

D-Link DAP-2695 Firmware Update sub_4174B0 os command injection

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-12295 High · 8.1 CWE-347 Oct 27, 2025

D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-60566 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter.

CVE-2025-60565 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule.

CVE-2025-60564 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog.

CVE-2025-60563 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr.

CVE-2025-60562 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey.

CVE-2025-60561 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail.

CVE-2025-60559 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter.

CVE-2025-60558 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ.

CVE-2025-60557 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard.

CVE-2025-60556 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1.

CVE-2025-60555 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode.

CVE-2025-60554 Critical · 9.8 CWE-120 Oct 24, 2025

Classic Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard.

CVE-2025-60553 Critical · 9.8 CWE-120 Oct 24, 2025

Classic Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.

CVE-2025-60552 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup.

CVE-2025-60551 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page parameter in the function formDeviceReboot.

CVE-2025-60550 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone.

CVE-2025-60549 High · 7.5 CWE-121 Oct 24, 2025

Stack-based Buffer Overflow in Dlink Dir-600l Firmware

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4.