CVE-2025-15081

CVE-2025-15081 affects JD Cloud BE6500 v4.4.1.r4308. The vulnerability is in function sub_4780 of /jdcapi, where manipulation of the ddns_name argument enables command injection. The attack may be performed remotely and the exploit has been publicly disclosed. Red Hat/NTspecific advisories note n...

CVE-2025-15081 JD Cloud BE6500 jdcapi sub_4780 command injection

A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub4780 of the file /jdcapi. Such manipulation of the argument ddnsname leads to command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

CVE-2025-15081 JD Cloud BE6500 jdcapi sub_4780 command injection

A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub4780 of the file /jdcapi. Such manipulation of the argument ddnsname leads to command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

JD Cloud BE6500 命令注入漏洞

The JD Cloud BE6500 is a WiFi router from the Chinese company Jingdong JD. A command injection vulnerability exists in the JD Cloud BE6500 version 4.4.1.r4308, which stems from misuse of the parameter ddnsname of the function sub4780 in the file /jdcapi, which could lead to a command injection...