← Database

CVE-2025-12313

MEDIUM CVSS: 6.3 Published: 2025-10-27 Modified: 2026-06-17

Description

A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Platforms

Dlink Di-7001Mini-8G FirmwareDlink Di-7001Mini-8G

Weakness Type

CWE-74, CWE-77, CWE-77

References