The vulnerability in the gena.cgi script of D-Link DIR-852 router software allows a hacker to escalate their privileges and execute arbitrary commands.

The vulnerability in the gena.cgi script of D-Link DIR-852 router software is related to incorrect elimination of certain special elements. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary commands...

CVE-2025-13562

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

EUVD-2025-198579

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

CVE-2025-13562

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

CVE-2025-13562

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

CVE-2025-13562 D-Link DIR-852 gena.cgi command injection

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

CVE-2025-13562 D-Link DIR-852 gena.cgi command injection

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

CVE-2025-13562

The CVE-2025-13562 entry concerns D-Link DIR-852 (firmware 1.00). The vulnerability arises from processing the /gena.cgi file where manipulation of the service argument enables command injection, allowing remote execution. Public exploit information exists. Affected devices are described as no lo...

PT-2025-47856

Name of the Vulnerable Software and Affected Versions D-Link DIR-852 version 1.00 Description A flaw exists in the processing of the /gena.cgi file on the device. Manipulating the service argument can lead to command injection, allowing for remote execution of commands. The exploit is publicly...

D-Link DIR-852 命令注入漏洞

D-Link DIR-852 is a router from China AUO D-Link. A command injection vulnerability exists in the D-Link DIR-852 version 1.00, which stems from the misuse of the parameter service in the file /gena.cgi, and could lead to a command injection attack...

CVE-2025-13562: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

The vulnerability of the phpcgi_main() function in D-Link DIR-852 router microprogramming software allows a hacker to disclose confidential information.

The vulnerability of the phpcgimain function in D-Link DIR-852 router microprogramming software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...

D-Link DIR-852 HNAP1 File Command Injection Vulnerability

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from a command injection vulnerability that stems from the failure of file /HNAP1/ to properly filter...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software allows a hacker to execute arbitrary commands.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-11488

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

CVE-2025-11488 D-Link DIR-852 HNAP1 command injection

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

CVE-2025-11488 D-Link DIR-852 HNAP1 command injection

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

CVE-2025-11488

Summary: CVE-2025-11488 affects D-Link DIR-852 routers. Multiple connected sources confirm a vulnerability in the /HNAP1/ file handling, enabling remote command injection via crafted input. Affected versions are cited as prior to 20251003, with exploit code publicly available. The issue is associ...

CVE-2025-11488: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

D-Link DIR-852 命令注入漏洞

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from a command injection vulnerability that stems from the failure of file /HNAP1/ to properly filter...