Beveiligingsadvies

CVE-2025-15191

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-29 14:02:07
Laatst bijgewerkt 2025-12-29 14:26:08
Toegewezen door VulDB
CVSS-score 6.5
Status PUBLISHED

Beschrijving

A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_4155B4 of the file /boafrm/formLtefotaUpgradeFibocom. This manipulation of the argument fota_url causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.