CVE-2025-11335

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

CVE-2025-11335

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

EUVD-2025-32533

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

CVE-2025-11335 D-Link DI-7100G C1 jhttpd msp_info.htm sub_46409C command injection

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

CVE-2025-11335

CVE-2025-11335 affects D-Link DI-7100G C1 (firmware up to 20250928). The vulnerability is a command-injection in the jhttpd component, impacting the function sub_46409C in the file /msp_info.htm?flag=qos where the iface argument is manipulated. This enables remote code execution with high impact ...

D-Link DIR-852 Router Command Execution

The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

D-Link DIR-852 Router Arbitrary Command Execution

The vulnerability of the ssdpcgimain function in the htodcs/cgibin module of the D-Link DIR-852 router’s microprogramming system is related to the lack of measures taken at the control level to manage data cleanup. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

D-Link DIR-823X Router Sub_412E7C Function Arbitrary Command Execution

The vulnerability of the sub412E7C function in the /goform/setswitchsettings function of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the /goform/diagtraceroute function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning at the control level when processing the targetaddr parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...

D-Link DSL-7740C xmldbc() Privilege Escalation

The vulnerability of the xmldbc function in the microprogramming software of the D-Link DSL-7740C router is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

D-Link CGI Bin Script Injection

The vulnerability in the cgi-bin/ddnsenc.cg script of the D-Link DCS-2530L and DCS-2670L microprogramming systems for IP cameras is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

D-Link DI-7100G Sub 451754 Buffer Overflow DoS

The vulnerability of sub451754 in the microprogramming software of D-Link DI-7100G routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary commands remotely...

D-Link DI-7100G Router Arbitrary Command Execution

The vulnerability of sub47F028 in D-Link DI-7100G router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DCS-825L Code Data Compromise

The vulnerability of the microprogrammed software of the D-Link DCS-825L network camera relates to the loading of code without checking its integrity. Exploiting this vulnerability can allow an intruder to enhance their privileges and execute arbitrary code...

D-link DIR-823X Router Arbitrary Command Execution

The vulnerability of the uciset function in D-link DIR-823X router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-645 Router Command Execution

The vulnerability of the soapcgimain function in the soap.cgi script of D-Link DIR-645 router software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the /goform/setdevicename function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning measures at the control level when processing the mac parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the /goform/setwifiblacklists function in the microprogramming software for D-Link DIR-823X routers is related to the lack of measures taken at the control level when processing the macList parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the setcassword function in D-Link DIR-823X router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the httpcasswd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2025-40913

Name of the Vulnerable Software and Affected Versions D-Link DI-7100G C1 versions up to 20250928 Description A flaw exists in the jhttpd component of D-Link DI-7100G C1. The issue is due to a buffer overflow in the sub 4BD4F8 function within the /webchat/hi block.asp file. The popupId argument ca...