CVE-2025-4340

🗓️ 06 May 2025 08:00:08Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 61 Views

Critical vulnerability in D-Link DIR-890L and DIR-806A1 allows remote command injection attacks.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-4340	6 May 202514:21	–	circl
CNNVD	D-Link DIR-890L和D-Link DIR-806A1 安全漏洞	6 May 202500:00	–	cnnvd
CNVD	D-Link DIR-890L/DIR-806A1 Command Injection Vulnerability	14 May 202500:00	–	cnvd
Cvelist	CVE-2025-4340 D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection	6 May 202508:00	–	cvelist
EUVD	EUVD-2025-13558	3 Oct 202520:07	–	euvd
NVD	CVE-2025-4340	6 May 202508:15	–	nvd
OpenVAS	D-Link DIR-890L Multiple Vulnerabilities (2023 - 2025)	13 May 202500:00	–	openvas
OpenVAS	D-Link DIR-806 Multiple Vulnerabilities (2019 - 2025)	13 May 202500:00	–	openvas
Positive Technologies	PT-2025-19930 · D Link · D-Link Dir-806A1 +1	6 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-4340	8 May 202510:11	–	redhatcve

NVD

Node

dlink dir-806_firmwareRange≤100cnb11

AND

dlink dir-806Matcha1

Node

dlink dir-890l_firmwareRange≤1.08b03

AND

dlink dir-890lMatcha1

[
  {
    "vendor": "D-Link",
    "product": "DIR-890L",
    "versions": [
      {
        "version": "100CNb11",
        "status": "affected"
      },
      {
        "version": "108B03",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DIR-806A1",
    "versions": [
      {
        "version": "100CNb11",
        "status": "affected"
      },
      {
        "version": "108B03",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
dlink	www.dlink.com/
github	www.github.com/CH13hh/tmp_store_cc/blob/main/tt/1.md
vuldb	www.vuldb.com/

13 May 2025 20:25Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.3 - 9.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.0278

SSVC