CVE-2025-11488: D-Link DIR-852 HNAP1 command injection
A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11488?
CVE-2025-11488 has been classified as a high-severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2025-11488?
To remediate CVE-2025-11488, upgrade the D-Link DIR-852 device to a version later than 20251002.
What are the risks associated with CVE-2025-11488?
The risks of CVE-2025-11488 include unauthorized remote execution of commands, which could lead to full system compromise.
Who is affected by CVE-2025-11488?
Users of D-Link DIR-852 devices running firmware up to and including version 20251002 are affected by CVE-2025-11488.
Can CVE-2025-11488 be exploited remotely?
Yes, CVE-2025-11488 can be exploited remotely, allowing attackers to execute malicious commands on the vulnerable device.