PT-2026-23501 · D Link · D-Link Dir-1253 Mesh

Published 2025-08-18 · Updated 2026-05-06 · CVE-2025-29165

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-1253 MESH version 1.6.1684

Description A flaw exists in D-Link DIR-1253 MESH that permits an attacker to gain elevated privileges through the etc/shadow.sample component.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2026-04448

CVE-2025-29165

Affected Products

D-Link Dir-1253 Mesh

References · 14

• https://bdu.fstec.ru/vul/2026-04448 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-29165 · Security Note
• https://github.com/rhpz/DIR-1253 · Note
• https://archive.org/details/dir-1253-m-dlink-id-v-1.6.1527 · Note
• ❌ https://github.com/twentysevns/Vuln-IoT-Reports/blob/main/DLINK/DIR-1253/README.md · Note, Deleted
• https://twitter.com/TheHackerWire/status/2030614455189717454 · Twitter Post
• https://twitter.com/CVEnew/status/2030755431107154358 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2029743353533723111 · Twitter Post
• https://zuh.re/cve/2025-29165 · Note
• https://t.me/cveNotify/154788 · Telegram Post
• https://t.me/cveNotify/162400 · Telegram Post
• https://dlink.com/en/security-bulletin · Note
• https://twitter.com/vuldb/status/2029939599498432572 · Twitter Post
• https://codeberg.org/zuhri/advisory/src/branch/main/CVE-2025-29165 · Note