CVE-2025-14225: D-Link DCS-930L alphapd setSystemAdmin command injection
A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14225?
CVE-2025-14225 is classified as a high severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2025-14225?
To mitigate CVE-2025-14225, update the D-Link DCS-930L to the latest firmware version provided by the vendor.
What is affected by CVE-2025-14225?
CVE-2025-14225 affects the D-Link DCS-930L camera running firmware version 1.15.04.
Can CVE-2025-14225 be exploited remotely?
Yes, CVE-2025-14225 can be exploited remotely through manipulation of the AdminID argument.
What type of vulnerability is CVE-2025-14225?
CVE-2025-14225 is a command injection vulnerability in the web interface of the affected device.