The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 allows attackers to execute malicious commands.

🗓️ 03 Sep 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 lies in the failure to eliminate special elements during the processing of the EVENT=CH...

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2018-25115	27 Aug 202521:24	–	attackerkb
Circl	CVE-2018-25115	27 Aug 202521:46	–	circl
CNNVD	D-Link多款产品安全漏洞	27 Aug 202500:00	–	cnnvd
CVE	CVE-2018-25115	27 Aug 202521:24	–	cve
Cvelist	CVE-2018-25115 D-Link DIR-110/412/600/615/645/815 RCE via service.cgi	27 Aug 202521:24	–	cvelist
EUVD	EUVD-2018-21602	7 Oct 202500:30	–	euvd
NVD	CVE-2018-25115	27 Aug 202522:15	–	nvd
OpenVAS	D-Link Multiple DIR Devices RCE Vulnerability (Aug 2025)	12 Sep 202500:00	–	openvas
OSV	CVE-2018-25115	27 Aug 202522:15	–	osv
Positive Technologies	PT-2025-34954 · D Link · D-Link Dir-645 +6	27 Aug 202500:00	–	ptsecurity

Vulners

Node

d-link dir-645Match1.03

d-link dir-600Match1.03

d-link dir-110Match1.03

d-link dir-412Match1.03

d-link dir-610Match1.03

d-link dir-615Match1.03

d-link dir-815Match1.03

Source	Link
github	www.github.com/Cr0n1c/dlink_shell_poc/blob/master/dlink_auth_rce
legacy	www.legacy.us.dlink.com/
support	www.support.dlink.com/EndOfLifePolicy.aspx
exploit-db	www.exploit-db.com/exploits/43496
vulncheck	www.vulncheck.com/advisories/dlink-dir-rce-service-cgi
web	www.web.nvd.nist.gov/view/vuln/detail

03 Sep 2025 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 210

CVSS 310

EPSS0.08674