CVE-2025-7932
Medium
Description
A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbc_system of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
SeverityMedium
CVSS6.3
Exploit probability—
ProductDlink Dir-817l Firmware
PublishedJul 21, 2025
First seenJul 21, 2025
Weakness typeCWE-77Command injectionCWE-74Injection
How to fix
Update
- dlink dir-817l_firmware1.04b01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-817l_firmware | v < 1.04b01 | 1.04b01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.