VulnerabilityAnalyzed
CVE-2025-7932
A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01.
LOW 2.1EPSS 4.99%
Does this matter?
Lower severity and a low EPSS score (4.99%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbc_system of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- CVSS 4.0
- 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 4.99% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-74, CWE-77
- Affected
- dlink/dir-817l firmware
- Source
- cna@vuldb.com
References
- https://github.com/Patr1ck-S/Patr1ck-S.github.io/blob/main/D-Link%20DIR%E2%80%91817L%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi(1).mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.317061Permissions Required, VDB Entry
- https://vuldb.com/?id.317061Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.618951Third Party Advisory, VDB Entry
- https://www.dlink.com/Product
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.