Command Injection Vulnerability in D-Link Routers
CVE-2025-9769

2.4LOW

Key Information:

Vendor

D-link
Status
Di-7400g+
Vendor
CVE Published:
1 September 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-9769?

A security flaw has been identified in the D-Link DI-7400G+ routers, specifically within the function sub_478D28 of the /mng_platform.asp file. This vulnerability allows for command injection through manipulation of the parameter 'addr', enabling attackers to execute arbitrary commands on the device. A publicly available exploit demonstrates the ease of executing this attack, highlighting significant security risks for devices using version 19.12.25A1. Users are advised to assess their systems and apply necessary security measures.

Affected Version(s)

DI-7400G+ 19.12.25A1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-9769 - Proof of Concept

CVE-2025-9769 - Proof of Concept

References

https://vuldb.com/?id.322069
vdb-entrytechnical-description
https://vuldb.com/?ctiid.322069
signaturepermissions-required
https://vuldb.com/?submit.640779
third-party-advisory

CVSS V4

Score:
2.4
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

xuanyu (VulDB User)
.
CVE-2025-9769 : Command Injection Vulnerability in D-Link Routers