CVE-2025-5621: D-Link DIR-816 qosClassifier os command injection
A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dipaddress/sipaddress leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5621?
CVE-2025-5621 is classified as a critical vulnerability.
How do I fix CVE-2025-5621?
To mitigate CVE-2025-5621, update the D-Link DIR-816 to the latest firmware version provided by D-Link.
What type of attack does CVE-2025-5621 enable?
CVE-2025-5621 enables OS command injection due to improper validation of input in the qosClassifier function.
Which device is affected by CVE-2025-5621?
CVE-2025-5621 affects the D-Link DIR-816 router.
What potential impact does CVE-2025-5621 have on users?
CVE-2025-5621 can allow an attacker to execute arbitrary commands on the affected device.