PT-2025-44344 · D Link · Dns-343 Firmware

Published 2025-10-29 · Updated 2025-11-28 · CVE-2018-25120

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DNS-343 ShareCenter versions up to and including 1.05

Description D-Link DNS-343 ShareCenter devices with firmware up to version 1.05 have a command injection issue in the Mail Test functionality. The web maintenance script utilizes the /goform/Mail Test API endpoint and incorporates form parameters directly into a system email utility call without sufficient input validation. This allows an unauthenticated remote attacker to inject shell commands through crafted form data, leading to root-level execution on the device. The DNS-343 product line is end-of-life. The vulnerable parameters include those posted to the /goform/Mail Test endpoint.

Recommendations Update firmware to a version later than 1.05, if available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-25120

Affected Products

Dns-343 Firmware

References · 8

• 🔥 https://exploit-db.com/exploits/43845 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-25120 · Security Note
• https://osv.dev/vulnerability/CVE-2018-25120 · Vendor Advisory
• https://github.com/jamesbercegay/advisories/blob/master/%5BGTSA-00128%5D%20D-Link%20DNS-343%20ShareCenter%201.05%20Remote%20Root.txt · Note
• https://vulncheck.com/advisories/dlink-dns343-sharecenter-command-injection-via-goform-mail-test · Note
• https://dlink.com/al/sq/products/dns-343-sharecenter-4-bay-network-storage-enclosure · Note
• https://t.me/cveNotify/144278 · Telegram Post
• https://qkl.seebug.org/vuldb/ssvid-97088 · Note