CVE-2025-14225mediumCWE-74CWE-77

CVE-2025-14225: falha de média gravidade em D-Link DCS-930L

D-Link DCS-930L alphapd setSystemAdmin command injection

Publicada em

Seguir esta CVE+ Monitorar DCS-930L

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 8.9%
A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
D-Link · DCS-930L
CVEs relacionadas — D-Link DCS-930L

No mesmo produto, das mais perigosas para as menos.

CVE-2026-108971CRITICALD-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verificationEPSS 0.2%