CVE-2025-5571: D-Link DCS-932L setSystemAdmin os command injection
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5571?
CVE-2025-5571 has been classified as critical due to its potential for remote command injection.
How do I fix CVE-2025-5571?
To mitigate CVE-2025-5571, update the D-Link DCS-932L firmware to the latest version that addresses the vulnerability.
What type of vulnerability is CVE-2025-5571?
CVE-2025-5571 is an OS command injection vulnerability affecting the setSystemAdmin function.
Can CVE-2025-5571 be exploited remotely?
Yes, CVE-2025-5571 can be exploited remotely, allowing attackers to execute commands on the affected system.
Which application is affected by CVE-2025-5571?
CVE-2025-5571 affects the D-Link DCS-932L camera running firmware version 2.18.01.