The vulnerability of the sub_478D28 function in D-Link DI-7400G+ router microprogramming software allows a hacker to gain unauthorized access to the administrator interface.

The vulnerability of function sub478D28 in the D-Link DI-7400G+ router’s microprogramming system is related to the lack of measures taken to neutralize certain special elements. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the administrator interface...

CVE-2025-9769 D-Link DI-7400G+ mng_platform.asp sub_478D28 command injection

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub478D28 of the file /mngplatform.asp. The manipulation of the argument addr with the input echo 12345 poc.txt results in command injection. An attack on the physical device is feasible. The exploit has...

CVE-2025-9769: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub478D28 of the file /mngplatform.asp. The manipulation of the argument addr with the input echo 12345 poc.txt results in command injection. An attack on the physical device is feasible. The exploit has...

Vulnerability of the sub_478D28() and sub_4A12DC() functions of D-Link DI-7400G+ microprogrammed router software, allowing attackers to execute arbitrary commands

The vulnerability of the sub478D28 and sub4A12DC functions in D-Link DI-7400G+ software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending specially crafted GET requests remotely...

CVE-2025-57105

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...