← Database

CVE-2025-25894

HIGH CVSS: 8.0 Published: 2025-02-18 Modified: 2026-06-17

Description

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.

Affected Platforms

Dlink Dsl-3782 FirmwareDlink Dsl-3782

Weakness Type

CWE-78

References