CVE-2025-15357
6.3MEDIUMA vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the file /msp_info.htm?flag=cmd. The manipulation of the argument cmd results in command injection. The at
Published: 12/30/2025Updated: 1/9/2026
Description
A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the file /msp_info.htm?flag=cmd. The manipulation of the argument cmd results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.
AI AnalysisPowered by AI
Affected Products
dlinkdi-7400g\+_firmware
19.12.25a1
dlinkdi-7400g\+
a1
References
- https://github.com/xyh4ck/iot_poc/tree/main/D-Link_DI_7400G%2B_Command_InjectionExploitThird Party Advisory
- https://vuldb.com/?ctiid.338743Permissions RequiredVDB Entry
- https://vuldb.com/?id.338743Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.726376Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product