CVE-2025-0481 - D-Link DIR-878 HTTP POST Request dllog.cgi information disclosure

Back Back to CVE browser

MEDIUM

D-Link DIR-878 HTTP POST Request dllog.cgi information disclosure

Published Jan 15, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 1.41%

Description

A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor D-Link Product DIR-878 Default
n/a
- Version
  1.03
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

DIR-878

n/a

Version	Status	Constraints
1.03	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-284

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1704
Advisory
https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-878/dllog.md
exploitBroken Link
https://vuldb.com/?ctiid.291924
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.291924
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.475011
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1704		Advisory
https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-878/dllog.md		exploitBroken Link
https://vuldb.com/?ctiid.291924		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.291924		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.475011		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/		product