CVE-2025-14659: D-Link DIR-860LB1/DIR-868LB1 DHCP command injection
A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14659?
CVE-2025-14659 has a critical severity level due to the potential for remote command injection.
How do I fix CVE-2025-14659?
To fix CVE-2025-14659, update your D-Link DIR-860LB1 or DIR-868LB1 to the latest firmware version.
Which D-Link products are affected by CVE-2025-14659?
CVE-2025-14659 affects the D-Link DIR-860LB1 and DIR-868LB1 routers running firmware versions 203b01 and 203b03.
Can CVE-2025-14659 be exploited remotely?
Yes, CVE-2025-14659 can be exploited remotely, allowing attackers to execute arbitrary commands.
What component is vulnerable in CVE-2025-14659?
The vulnerable component in CVE-2025-14659 is the DHCP Daemon.