CVE-2025-1392: medium-severity vulnerability in D-Link DIR-816
D-Link DIR-816 index.html cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.1epss 8.7%
A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G_basic. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
D-Link · DIR-816Related CVEs — D-Link DIR-816
In the same product, most dangerous first.
CVE-2025-5623CRITICALD-Link DIR-816 qosClassifier stack-based overflowEPSS 19.5%CVE-2024-0717MEDIUMD-Link Good Line Router v2 HTTP GET Request devinfo information disclosureEPSS 18.2%CVE-2025-5620MEDIUMD-Link DIR-816 setipsec_config os command injectionEPSS 5.5%CVE-2025-5621MEDIUMD-Link DIR-816 qosClassifier os command injectionEPSS 5.4%CVE-2026-8345MEDIUMD-Link DIR-816 singlePortForward sub_445E7C command injectionEPSS 3.5%CVE-2026-8344MEDIUMD-Link DIR-816 formDMZ.cgi sub_445E7C command injectionEPSS 3.5%