← CVE Intelligence

CVE-2025-12313

D-Link DI-7001 MINI msp_info.htm command injection PUBLISHED

Description (CNA)

A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / productVersions
D-Link / DI-7001 MINIaffected 19.09.19A1; affected 24.04.18B1

CWE

CWE-77, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.