CVE-2025-11488
🟡 Monitoruj
Wstrzyknięcie poleceń w D-Link DIR-852 umożliwia zdalne wykonanie kodu.
CVSS
7.3
EPSS
1.6%
Exploit
none
Vendor
Opis źródłowy (NVD)
A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.
rce
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.3 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 1.6% |
| Opublikowano (NVD) | 2025-10-08 18:15:34 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-08 13:10:00 UTC |