CVE-2018-25115

🗓️ 27 Aug 2025 21:24:23Reported by VulnCheckType

D-Link DIR routers flaw allows unauthenticated remote command execution via EVENT=CHECKFW in service.cgi.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2018-25115	27 Aug 202521:24	–	attackerkb
Circl	CVE-2018-25115	27 Aug 202521:46	–	circl
CNNVD	D-Link多款产品安全漏洞	27 Aug 202500:00	–	cnnvd
Cvelist	CVE-2018-25115 D-Link DIR-110/412/600/615/645/815 RCE via service.cgi	27 Aug 202521:24	–	cvelist
EUVD	EUVD-2018-21602	7 Oct 202500:30	–	euvd
NVD	CVE-2018-25115	27 Aug 202522:15	–	nvd
OpenVAS	D-Link Multiple DIR Devices RCE Vulnerability (Aug 2025)	12 Sep 202500:00	–	openvas
Positive Technologies	PT-2025-34954 · D Link · D-Link Dir-645 +6	27 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2018-25115	30 Aug 202518:18	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2018-25115	6 Sep 202300:00	–	vulncheck_kev

NVD

Vulners

CNA

Node

dlink dir-110_firmwareMatch-

AND

dlink dir-110Match-

Node

dlink dir-412_firmwareMatch-

AND

dlink dir-412Match-

Node

dlink dir-600_firmwareMatch-

AND

dlink dir-600Match-

Node

dlink dir-610_firmwareMatch-

AND

dlink dir-610Match-

Node

dlink dir-615_firmwareMatch-

AND

dlink dir-615Match-

Node

dlink dir-645_firmwareMatch-

AND

dlink dir-645Match-

Node

dlink dir-815_firmwareMatch1.03

AND

dlink dir-815Match-

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "service.cgi"
    ],
    "product": "DIR-110",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "modules": [
      "service.cgi"
    ],
    "product": "DIR-412",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "modules": [
      "service.cgi"
    ],
    "product": "DIR-600",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "modules": [
      "service.cgi"
    ],
    "product": "DIR-615",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "modules": [
      "service.cgi"
    ],
    "product": "DIR-645",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "modules": [
      "service.cgi"
    ],
    "product": "DIR-815",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "1.03",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.dlink.com/EndOfLifePolicy.aspx
exploit-db	www.exploit-db.com/exploits/43496
vulncheck	www.vulncheck.com/advisories/dlink-dir-rce-service-cgi
github	www.github.com/Cr0n1c/dlink_shell_poc/blob/master/dlink_auth_rce
legacy	www.legacy.us.dlink.com/

25 May 2026 23:40Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

CVSS 410

EPSS0.01341

SSVC

CWE-78