Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-12296

Опубликовано: 27 окт. 2025
Источник: nvd
CVSS3: 4.7
CVSS3: 9.8
CVSS2: 5.8
EPSS Низкий

Описание

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dap-2695_firmware:2.00:rc131:*:*:*:*:*:*
cpe:2.3:h:dlink:dap-2695:-:*:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00223
Низкий

4.7 Medium

CVSS3

9.8 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 4.7
github
3 месяца назад

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS3: 4.7
fstec
4 месяца назад

Уязвимость функции sub_4174B0() микропрограммного обеспечения беспроводных точек доступа D-Link DAP-2695, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 45%
0.00223
Низкий

4.7 Medium

CVSS3

9.8 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-77
CWE-78