Command Injection Flaw in D-Link DSL-7740C Router
CVE-2025-29516

7.2HIGH

Key Information:

Vendor

D-Link
Status
DSL-7740C Router
Vendor
CVE Published:
25 August 2025

What is CVE-2025-29516?

A command injection vulnerability has been identified in the D-Link DSL-7740C router, specifically impacting the backup function of the firmware version DSL7740C.V6.TR069.20211230. This flaw may allow an attacker to execute arbitrary commands on the affected device, potentially compromising its security and functionality. Users are encouraged to review their router's firmware version and apply relevant patches to safeguard their networks.

References

https://www.dlink.com/en/security-bulletin/
https://gist.github.com/stevenyu113228/07639885a3357674f4...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.