Vulnerability record · CVE-2025-4341 · published 6 May 2025

CVE-2025-4341: Dlink dir-880l firmware injection vulnerability

Dlink · Dir 880l Firmware

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

5.3 CVSS 4.0 Medium EPSS 21% · top 2.5% CWE-74 · InjectionCWE-77 · Command injection

5.3CVSS 4.0 base score, v2 6.5

21%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Dir 880l Firmware Dlink

References

Link	Tags
https://github.com/CH13hh/tmp_store_cc/blob/main/DIR-880L/1.md	Broken Link
https://vuldb.com/?ctiid.307459	Permissions RequiredVDB Entry
https://vuldb.com/?id.307459	Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.556433	Third Party AdvisoryVDB Entry
https://www.dlink.com/	Product
https://github.com/CH13hh/tmp_store_cc/blob/main/DIR-880L/1.md	Broken Link

Track CVE-2025-4341 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-17621D-Link DIR-859 UPnP gena.cgi unauthenticated command injectionThe UPnP endpoint /gena.cgi on D-Link DIR-859 firmware 1.05 and 1.06B01 Beta01 fails to sanitize input in an HTTP SUBSCRIBE request, allowing OS comm…KEVEPSS 90%analysed30 Dec 2019 9.8CVE-2018-6530D-Link DIR router soap.cgi OS command injectionsoap.cgi (soapcgi_main in cgibin) on several D-Link DIR router models fails to sanitize the service parameter, allowing OS command injection. The fla…KEVEPSS 97%analysed6 Mar 2018 9.8CVE-2017-14948Dlink dir-868l firmware classic buffer overflow vulnerabilityCertain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary cod…EPSS 4.9%14 Oct 2019 9.8CVE-2018-20675Dlink dir-822 firmware improper authentication vulnerabilityD-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-8…EPSS 1.8%9 Jan 2019 9.8CVE-2016-6563D-Link DIR routers stack buffer overflow via HNAP SOAP loginMalformed SOAP messages sent to the HNAP Login action overflow a stack buffer in several D-Link DIR router models. The vulnerable XML fields are Acti…EPSS 80%analysed13 Jul 2018 8.8CVE-2018-20674Dlink dir-822 firmware vulnerabilityD-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-8…EPSS 2.5%9 Jan 2019 7.5CVE-2020-29322Dlink dir-880l firmware insufficiently protected credentials vulnerabilityThe D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthent…EPSS 1.7%4 Jun 2021 7.5CVE-2019-20213Dlink dir-859 firmware injection vulnerabilityD-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnc…EPSS 2.2%2 Jan 2020

Source: NIST National Vulnerability Database (record CVE-2025-4341), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.