CVE-2025-4341: D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection
A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4341?
CVE-2025-4341 is classified as a critical vulnerability.
How do I fix CVE-2025-4341?
To address CVE-2025-4341, update the D-Link DIR-880L to the latest firmware version beyond 104WWb01.
What components are affected by CVE-2025-4341?
CVE-2025-4341 affects the Request Header Handler function in the D-Link DIR-880L.
What versions of the D-Link DIR-880L are vulnerable to CVE-2025-4341?
Versions of the D-Link DIR-880L up to and including 104WWb01 are vulnerable to CVE-2025-4341.
What type of manipulation is associated with CVE-2025-4341?
CVE-2025-4341 involves manipulation of arguments such as HTTP_ST, REMOTE_ADDR, REMOTE_PORT, and SERVER_ID.