EUVD-2026-25701Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
AnalysisAI
Stored or reflected cross-site scripting (XSS) in D-Link DGS-3420 firmware 1.50.018 allows authenticated remote attackers to inject malicious scripts via the System Name parameter on the System Information Settings Page. The vulnerability requires high-level administrative privileges and user interaction (UI:R), limiting exploitation to scenarios where an authenticated admin visits a malicious page or clicks a crafted link. Publicly available exploit code exists; CVSS 4.5 reflects the requirement for admin access and user interaction, though the impact is information disclosure or session hijacking potential through XSS.
Technical ContextAI
The vulnerability is a reflected or stored XSS flaw (CWE-79: Improper Neutralization of Input During Web Page Generation) in the System Information Settings Page component of D-Link DGS-3420 network switches. The System Name input parameter is not properly sanitized before being rendered in HTTP responses or stored in the web interface. Unlike network-based XSS requiring MIME sniffing or browser bugs, this attack leverages the switch's web management interface where administrators configure device settings. The CPE indicates all versions of the DGS-3420 product line are potentially affected, though version 1.50.018 is explicitly confirmed vulnerable.
RemediationAI
Upgrade D-Link DGS-3420 to the latest available firmware release beyond 1.50.018; consult D-Link support (www.dlink.com) for the specific patched version number, as it is not disclosed in the vulnerability sources. Until patching is possible, implement the following compensating controls: (1) restrict web management interface access to trusted administrative networks only using firewall rules or access control lists (trade-off: reduces remote management capability), (2) disable the System Information Settings Page feature if unused (verify with D-Link documentation for side effects on monitoring), (3) require multi-factor authentication for admin access if supported by the device (reduces social engineering risk), and (4) educate administrators to avoid clicking untrusted links while logged into the switch web interface. Monitor D-Link security advisories for confirmed patch releases.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today