Command Injection Vulnerability in D-Link DSL-7740C Router
CVE-2025-29517

6.8MEDIUM

Key Information:

Vendor

D-Link
Status
DSL-7740C
Vendor
CVE Published:
25 August 2025

What is CVE-2025-29517?

The D-Link DSL-7740C router is affected by a command injection vulnerability that can be exploited through the traceroute6 function. An attacker who successfully exploits this vulnerability could execute arbitrary commands on the affected device, potentially compromising the security of the network. Users are encouraged to review the affected firmware version and apply necessary updates to mitigate risks.

References

https://www.dlink.com/en/security-bulletin/
https://gist.github.com/stevenyu113228/8ddb33c26f3a5987f5...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.