Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dcs-850l:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDcs 850L (e85e28dd-92e2-5c45-86c5-13789c69c961)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15245 not_vulnerable 2026-06-08 07:06:35.933873 D-Link DCS-850L Firmware Update Service uploadfirmware path traversal
LOW (3.5)
A vulnerability was found in D-Link DCS-850L 1.02.09. Affected is the function uploadfirmware of the component Firmware Update Service. The manipulation of the argument DownloadFile results in path traversal. The attack must originate from the local network. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-12-30T11:02:16.676Z
Updated: 2025-12-30T12:57:33.830Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.