Unrated severityNVD Advisory· Published Aug 28, 2025· Updated Aug 28, 2025

CVE-2025-55583

Description

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a pre_api_arg parameter that is passed directly to system-level shell execution functions without sanitization or authentication. Remote attackers can exploit this to execute arbitrary commands as root via crafted HTTP requests.

Affected products

Dlink/DIR-868Lllm-fuzzy
Range: = FW2.05WWB02

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cybermaya.in/posts/Post-44/mitre
supportannouncement.us.dlink.com/security/publication.aspxmitre
www.dlink.com/en/security-bulletin/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000