Di 7300G Firmware

CVE-2025-6899 Jun 30, 09:15 LOW POC Monitor

Command injection in D-Link DI-7300G+ and DI-8200G routers allows remote authenticated attackers to execute arbitrary OS commands via the msp_info.htm endpoint. Affected firmware versions include 17.12.20A1 and 19.12.25A1. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates a low exploitation probability of 0.20%.

CVE-2025-6898 Jun 30, 08:15 LOW Monitor

OS command injection in D-Link DI-7300G+ firmware version 19.12.25A1 allows remote authenticated attackers to execute arbitrary commands on the device. The vulnerability resides in the proxy_client.asp endpoint, where attacker-supplied proxy server parameters are passed unsanitized to a system shell. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV.

CVE-2025-6897 Jun 30, 08:15 LOW Monitor

OS command injection in D-Link DI-7300G+ firmware 19.12.25A1 allows authenticated adjacent-network attackers to execute arbitrary commands via the Time parameter in httpd_debug.asp. A publicly available exploit exists, but there is no evidence of active exploitation (not listed in CISA KEV) and EPSS indicates a low exploitation probability (0.13%). This flaw requires low-privilege access and local network connectivity.

CVE-2025-6896 Jun 30, 07:15 LOW POC Monitor

OS command injection in D-Link DI-7300G+ firmware 19.12.25A1 allows authenticated remote attackers to execute arbitrary OS commands through the wget_test.asp endpoint’s url parameter. Exploit code is publicly available, though EPSS indicates low immediate exploitation likelihood (0.19%). The device is a legacy VPN router with limited deployment, reducing mass-exploitation risk.

CVE-2023-45580 Oct 16, 07:15 CRITICAL POC Act Now

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45579 Oct 16, 07:15 CRITICAL POC Act Now

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45578 Oct 16, 07:15 CRITICAL POC Act Now

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45577 Oct 16, 07:15 CRITICAL POC Act Now

Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45576 Oct 16, 07:15 CRITICAL POC Act Now

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45575 Oct 16, 06:15 CRITICAL POC Act Now

Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45574 Oct 16, 06:15 CRITICAL POC Act Now

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45573 Oct 16, 06:15 CRITICAL POC Act Now

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-45572 Oct 16, 06:15 CRITICAL POC Act Now

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.