CVE-2025-4340

MEDIUM

D-Link DIR-890L and DIR-806A1 < 1.08b03 - OS Command Injection via /htdocs/soap.cgi

Title source: llm

Description

A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.307458

Permissions Required, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.307458

Third Party Advisory, VDB Entry third-party-advisory

https://vuldb.com/?submit.556092

Exploit, Third Party Advisory exploit

https://github.com/CH13hh/tmp_store_cc/blob/main/tt/1.md

Product product

https://www.dlink.com/

Scores

CVSS v3 6.3

EPSS 0.0278

EPSS Percentile 86.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-74 CWE-77

Status published

Products (2)

dlink/dir-806_firmware < 100cnb11

dlink/dir-890l_firmware < 1.08b03

Published May 06, 2025

Tracked Since Feb 18, 2026