CVE-2025-9745

ALTO 7.2CVE-2025-9745 · Published 31/08/2025 · updated 18/10/2026

In breve

CVE-2025-9745 è una vulnerabilità ALTO (CVSS 7.2).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 12.7%, superiore al 96.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function of the file /version_upgrade.asp of the component jhttpd. The manipulation of the argument path leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

References

physicszq/Routers · Exploit
physicszq/Routers · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
dlink.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free