CVE-2025-4340 | THREATINT

Description

A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Es wurde eine kritische Schwachstelle in D-Link DIR-890L and DIR-806A1 bis 100CNb11/108B03 entdeckt. Dabei betrifft es die Funktion sub_175C8 der Datei /htdocs/soap.cgi. Durch Manipulieren mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.

Reserved 2025-05-05 | Published 2025-05-06 | Updated 2025-05-06 | Assigner VulDB

MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

MEDIUM: 6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

MEDIUM: 6.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.5AV:N/AC:L/Au:S/C:P/I:P/A:P

Problem types

Command Injection

Injection

Product status

100CNb11

affected

108B03

affected

100CNb11

affected

108B03

affected

Timeline

2025-05-05:	Advisory disclosed
2025-05-05:	VulDB entry created
2025-05-05:	VulDB entry last update

Credits

BabyShark (VulDB User) reporter

References

vuldb.com/?id.307458 (VDB-307458 | D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection) vdb-entry technical-description

vuldb.com/?ctiid.307458 (VDB-307458 | CTI Indicators (IOB, IOC, TTP, IOA)) signature permissions-required

vuldb.com/?submit.556092 (Submit #556092 | D-Link DIR-890 L A1 DIR-806A1 DIR-890 L A1<=108B03 DIR-806A1<=100CNb11 Command execution) third-party-advisory

github.com/CH13hh/tmp_store_cc/blob/main/tt/1.md exploit

www.dlink.com/ product

cve.org (CVE-2025-4340)

nvd.nist.gov (CVE-2025-4340)

Download JSON