CVE-2025-15357: D-Link DI-7400G+ msp_info.htm command injection
A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the file /mspinfo.htm?flag=cmd. The manipulation of the argument cmd results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15357?
CVE-2025-15357 is a critical vulnerability due to the potential for remote command injection.
How do I fix CVE-2025-15357?
To fix CVE-2025-15357, ensure that the D-Link DI-7400G+ firmware is updated to the latest version provided by the manufacturer.
What is the impact of CVE-2025-15357?
The impact of CVE-2025-15357 includes unauthorized remote access and execution of commands on the affected D-Link device.
Can CVE-2025-15357 be exploited remotely?
Yes, CVE-2025-15357 can be exploited remotely, allowing attackers to execute malicious commands.
What software is affected by CVE-2025-15357?
CVE-2025-15357 affects the D-Link DI-7400G+ device running firmware version 19.12.25A1.