CVE-2025-7192 - D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection

Back Back to CVE browser

MEDIUM

D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection

Published Jul 8, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 4.28%

Description

A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor D-Link Product DIR-645 Default
unknown
Affected
- 1.05B01

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
D-Link	DIR-645	unknown	Affected 1.05B01

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-77

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20690
Advisory
https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR%E2%80%91645%20A1%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.315131
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.315131
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.607261
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20690		Advisory
https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR%E2%80%91645%20A1%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.315131		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.315131		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.607261		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Jul 8, 2025

Updated Jul 9, 2025

Reserved Jul 7, 2025

Link CVE-2025-7192

CISA Vulnrichment

Updated Jul 9, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-7192

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Jul 8, 2025

Updated Jul 9, 2025

Link EUVD-2025-20690

GitHub

No data