CVE-2025-15245

CVE-2025-15245 concerns D-Link DCS-850L firmware, version 1.02.09, in the Firmware Update Service’s uploadfirmware function. The issue is a path traversal caused by manipulating the DownloadFile argument. Exploitation requires local-network access, and public exploit code exists. The vulnerabilit...