What is the CVSS score of CVE-2025-34048?

CVE-2025-34048 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.3%.

Which versions of D-Link are affected by CVE-2025-34048?

CVE-2025-34048 presents significant security risk, a path traversal vulnerability rated CVSS 8.7.

Is there a public PoC exploit available for CVE-2025-34048?

Yes, a public proof-of-concept exploit is available for CVE-2025-34048. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2025-34048?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Review file handling controls and restrict upload directories.

D-Link CVE-2025-34048

EUVD-2025-19207 HIGH

Path Traversal (CWE-22)

2025-06-26 disclosure@vulncheck.com

Path Traversal D-Link

8.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 23:54 euvd

EUVD-2025-19207

Analysis Generated

Mar 15, 2026 - 23:54 vuln.today

PoC Detected

Nov 17, 2025 - 22:15 vuln.today

Public exploit code

CVE Published

Jun 26, 2025 - 16:15 nvd

HIGH 8.7

DescriptionCVE.org

A path traversal vulnerability exists in the web management interface of D-Link DSL-2730U, DSL-2750U, and DSL-2750E ADSL routers with firmware versions IN_1.02, SEA_1.04, and SEA_1.07. The vulnerability is due to insufficient input validation on the getpage parameter within the /cgi-bin/webproc CGI script. This flaw allows an unauthenticated remote attacker to perform path traversal attacks by supplying crafted requests, enabling arbitrary file read on the affected device. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.

Analysis

Technical ContextAI

Path traversal allows an attacker to access files outside the intended directory by manipulating file paths with sequences like '../'.

RemediationAI

Validate and sanitize file path inputs. Use a whitelist of allowed files or directories. Implement chroot jails or containerization.

More from same product – last 7 days

CVE-2026-12174 HIGH This Week POC

7.4 Jun 13

Format string vulnerability in the D-Link DCS-935L 1.10.01 IP camera allows authenticated remote attackers to corrupt me

CVE-2025-34048 vulnerability details – vuln.today

Back