Dir 895la1 Firmware
1 CVEs
product
Monthly
D-Link DIR-895L router has command injection in the DHCP daemon via the hostname parameter during lease renewal. Any device requesting a DHCP lease with a malicious hostname achieves root code execution on the router. PoC available.
D-Link
Command Injection
Dir 895la1 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2025-69542
EPSS 2%
CVSS 9.8
CRITICAL
POC
Act Now
D-Link DIR-895L router has command injection in the DHCP daemon via the hostname parameter during lease renewal. Any device requesting a DHCP lease with a malicious hostname achieves root code execution on the router. PoC available.
D-Link
Command Injection
Dir 895la1 Firmware
NVD