Vulnerability record · CVE-2025-57105 · published 22 August 2025
CVE-2025-57105: Dlink di-7400g\+ firmware command injection vulnerability
Dlink · Di 7400g\+ Firmware
The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub_478D28 function in in mng_platform.asp, and sub_4A12DC function in wayos_ac_server.asp of the jhttpd program, with the parameter ac_mng_srv_host.
Description
The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub_478D28 function in in mng_platform.asp, and sub_4A12DC function in wayos_ac_server.asp of the jhttpd program, with the parameter ac_mng_srv_host.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://github.com/xyh4ck/iot_poc | ExploitThird Party Advisory |
| https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-7400G%2B | Product |
| https://www.dlink.com/en/security-bulletin/ | Not Applicable |
| https://github.com/xyh4ck/iot_poc | ExploitThird Party Advisory |
Track CVE-2025-57105 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2025-57105), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
