Insecure Default Credentials in D-Link DSL-7740C Firmware
CVE-2025-29521

5.3MEDIUM

Key Information:

Vendor

D-Link
Status
DSL-7740C
Vendor
CVE Published:
25 August 2025

What is CVE-2025-29521?

The D-Link DSL-7740C router, equipped with firmware version DSL7740C.V6.TR069.20211230, is vulnerable due to the presence of insecure default credentials for the Administrator account. This flaw potentially allows attackers to escalate their privileges by executing bruteforce attacks to gain unauthorized access to the device's management interface, compromising network security for connected users.

References

https://www.dlink.com/en/security-bulletin/
https://gist.github.com/stevenyu113228/73f06459df5ac3257f...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.