PT-2025-30146 · D Link · D-Link Dir-816L

Bananaship · Published 2025-07-16 · Updated 2025-10-03 · CVE-2025-7836

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-816L versions up to 2.06B01

Description A critical vulnerability has been identified in D-Link DIR-816L. The issue involves command injection through the lxmldbc system function located in the /htdocs/cgibin file within the Environment Variable Handler component. This allows for remote attacks. The exploit for this vulnerability has been publicly disclosed. It is important to note that this vulnerability affects products that are no longer supported by the maintainer.

Recommendations D-Link DIR-816L versions up to 2.06B01: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-77

Related Identifiers

BDU:2025-08855

CVE-2025-7836

Affected Products

D-Link Dir-816L

References · 14

• 🔥 https://github.com/bananashipsBBQ/CVE/blob/main/D-Link%20DIR-816L%20Remote%20Arbitrary%20Command%20Execution%20Vulnerability%20in%20ssdpcgi.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-7836 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7836 · Security Note
• https://bdu.fstec.ru/vul/2025-08855 · Security Note
• https://vuldb.com/?submit.617359 · Note
• https://t.me/cvetracker/28223 · Telegram Post
• https://t.me/cvenotify/129560 · Telegram Post
• https://twitter.com/CVEnew/status/1946619899897422030 · Twitter Post
• https://vuldb.com/?ctiid.316939 · Note
• https://twitter.com/SecAideInfo/status/1947601756390887577 · Twitter Post
• https://twitter.com/marcin_brz81183/status/1946622824434544959 · Twitter Post
• https://vuldb.com/?id.316939 · Note
• https://dlink.com · Note
• https://t.me/cveNotify/137360 · Telegram Post