CVE-2025-4341 – D-Link DIR-880L Command Injection Vulnerability

The following table lists the changes that have been made to the
CVE-2025-4341 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    May. 06, 2025

    Action Type Old Value New Value
    Added Tag unsupported-when-assigned
    Added Description A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
    Added CVSS V4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    Added CVSS V2 (AV:N/AC:L/Au:S/C:P/I:P/A:P)
    Added CWE CWE-77
    Added CWE CWE-74
    Added Reference https://github.com/CH13hh/tmp_store_cc/blob/main/DIR-880L/1.md
    Added Reference https://vuldb.com/?ctiid.307459
    Added Reference https://vuldb.com/?id.307459
    Added Reference https://vuldb.com/?submit.556433
    Added Reference https://www.dlink.com/
Share the Post:

Related Posts