High severity · published Mar 1, 2025
CVE-2025-1800
D-Link DAR-7000 HTTP POST Request sxh_vpnlic.php get_ip_addr_details command injection
8.8
CVSS
5.5%
EPSS
No
On KEV
Description
A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
DAR-7000 · D-Link
3.2 · source: vendor
DF
Dar-7000 Firmware · Dlink
3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-1800
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-1800
Exploit
https://github.com/sjwszt/CVE/blob/main/CVE_1.md
Permissions Required
https://vuldb.com/?ctiid.298030
Third Party Advisory
https://vuldb.com/?id.298030
Third Party Advisory
https://vuldb.com/?submit.502971
Product
https://www.dlink.com/
Vendor Advisory
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10354
More from DAR-7000
9.8
CVE-2024-9004
D-Link DAR-7000 Backup_Server_commit.php os command injection
8.8
CVE-2024-6525
D-Link DAR-7000 decodmail.php deserialization