Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 3

Количество 3

nvd логотип

CVE-2025-9769

12 месяцев назад

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. An attack on the physical device is feasible. The exploit has been released to the public and may be exploited.

CVSS3: 4.1
EPSS: Средний
github логотип

GHSA-3hhc-2692-pw9v

4 месяца назад

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. An attack on the physical device is feasible. The exploit has been released to the public and may be exploited.

CVSS3: 6.2
EPSS: Средний
fstec логотип

BDU:2025-11438

12 месяцев назад

Уязвимость функции sub_478D28 микропрограммного обеспечения маршрутизатора D-Link DI-7400G+, позволяющая нарушителю получить несанкционированный доступ к интерфейсу администратора

CVSS3: 4.1
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-9769

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. An attack on the physical device is feasible. The exploit has been released to the public and may be exploited.

CVSS3: 4.1
26%
Средний
12 месяцев назад
github логотип
GHSA-3hhc-2692-pw9v

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. An attack on the physical device is feasible. The exploit has been released to the public and may be exploited.

CVSS3: 6.2
26%
Средний
4 месяца назад
fstec логотип
BDU:2025-11438

Уязвимость функции sub_478D28 микропрограммного обеспечения маршрутизатора D-Link DI-7400G+, позволяющая нарушителю получить несанкционированный доступ к интерфейсу администратора

CVSS3: 4.1
26%
Средний
12 месяцев назад

Уязвимостей на страницу