← Database

CVE-2025-25893

HIGH CVSS: 8.0 Published: 2025-02-18 Modified: 2026-06-17

Description

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.

Affected Platforms

Dlink Dsl-3782 FirmwareDlink Dsl-3782

Weakness Type

CWE-78

References