VYPR
← All advisories
High severity8.0NVD Advisory· Published Feb 18, 2025· Updated Jun 17, 2026

CVE-2025-25893

CVE-2025-25893

Description

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.

Affected products

2
  • Dlink/DSL-3782cpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 1.01

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.