CVE-2025-9727: D-Link DIR-816L soap.cgi soapcgi_main os command injection
A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgimain of the file /soap.cgi. This manipulation of the argument service causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9727?
CVE-2025-9727 is classified as a high severity vulnerability due to the potential for remote command injection.
How do I fix CVE-2025-9727?
To mitigate CVE-2025-9727, update the D-Link DIR-816L to the latest firmware version provided by the vendor.
What specific function is vulnerable in CVE-2025-9727?
The vulnerability in CVE-2025-9727 affects the function soapcgi_main in the /soap.cgi file.
Can CVE-2025-9727 be exploited remotely?
Yes, CVE-2025-9727 allows for remote exploitation, making it critical for users to address the vulnerability promptly.
Which product is affected by CVE-2025-9727?
CVE-2025-9727 specifically affects the D-Link DIR-816L router.