Security Advisory

CVE-2025-9769

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-01 08:02:07
Last updated 2025-09-02 15:10:33
Assigner VulDB
State PUBLISHED

Description

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. An attack on the physical device is feasible. The exploit has been released to the public and may be exploited.