Remote Code Execution Vulnerability in D-Link DWR-M972V
CVE-2025-22968

9.8CRITICAL

Key Information:

Vendor
D-Link
Status
DWR-M972V
Vendor
CVE Published:
15 January 2025

Summary

D-Link DWR-M972V 1.05SSG suffers from a vulnerability that allows remote attackers to execute arbitrary commands via SSH. This issue enables attackers to access and manipulate the device's operations using the root account without authentication or restrictions, posing a significant risk to device integrity and network security. It is crucial for users to promptly apply any available security updates to mitigate potential exploitation.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/CRUNZEX/CVE-DLINK-LTE
https://github.com/CRUNZEX/CVE-2025-22968

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.