CVE-2025-57105

The D-Link DI-7400G+ router is vulnerable to a command injection flaw in its jhttpd program. Specifically, the sub_478D28 function in mng_platform.asp and the sub_4A12DC function in wayos_ac_server.asp fail to sanitize the ac_mng_srv_host parameter, which is stored in NVRAM . An attacker can send...

PT-2025-34445 · D Link · Di-7400G+ Router

Name of the Vulnerable Software and Affected Versions: DI-7400G+ router affected versions not specified Description: The DI-7400G+ router contains a command injection flaw that enables attackers to execute arbitrary commands on the device. This issue affects the sub 478D28 function within mng...

CVE-2025-57105

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...