Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:di-500wf_firmware:14.04.10a1t:*:*:*:*:*:*:*

part: o version: 14.04.10a1t update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDi 500Wf Firmware (a6afc284-0683-5036-bb6a-d9864ba93351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9745 vulnerable 2026-06-08 07:47:09.692359 D-Link DI-500WF jhttpd version_upgrade.asp os command injection
MEDIUM (4.7)
A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function of the file /version_upgrade.asp of the component jhttpd. The manipulation of the argument path leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-08-31T20:32:07.802Z
Updated: 2025-09-02T15:13:06.848Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.