Unrated severityNVD Advisory· Published May 20, 2025· Updated May 21, 2025

CVE-2025-44084

Description

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

Affected products

Dlink/DI-8100cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 16.07.26A1

Patches

Vulnerability mechanics

References

github.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.014
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000