VulnerabilityAnalyzed
CVE-2025-7192
A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical.
LOW 2.1EPSS 3.66%
Does this matter?
Lower severity and a low EPSS score (3.66%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
- CVSS 4.0
- 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 3.66% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-74, CWE-77
- Affected
- dlink/dir-645 firmware
- Source
- cna@vuldb.com
References
- https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR%E2%80%91645%20A1%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.315131Permissions Required, VDB Entry
- https://vuldb.com/?id.315131Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.607261Third Party Advisory, VDB Entry
- https://www.dlink.com/Product
- https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR%E2%80%91645%20A1%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi.mdExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.