Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-5492

A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub_456DE8 of the file /msp_info.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack can be launched remotely.

Published

2025-06-03T11:15:21.023

Last Modified

2025-07-15T17:22:55.370

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-74
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dlink di-500wf-wt_firmware ≤ 20250511 Yes
Hardware dlink di-500wf-wt - No
References