Record status Published
Identifier year (not publication year) 2025
Source publication Sep 15, 2025
Source updated Sep 15, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection
A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub_4621DC of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument hname leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
DI-8100
Vendor D-Link
Product DI-8100
Platforms Unknown
Default status Unknown
DI-8100 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 16.07.26A1 affectedUnavailable Unavailable Unavailable None listed 17.12.20A1 affectedUnavailable Unavailable Unavailable None listed 19.12.10A1 affectedUnavailable Unavailable Unavailable None listed
DI-8100G
Vendor D-Link
Product DI-8100G
Platforms Unknown
Default status Unknown
DI-8100G · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 16.07.26A1 affectedUnavailable Unavailable Unavailable None listed 17.12.20A1 affectedUnavailable Unavailable Unavailable None listed 19.12.10A1 affectedUnavailable Unavailable Unavailable None listed
DI-8200
Vendor D-Link
Product DI-8200
Platforms Unknown
Default status Unknown
DI-8200 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 16.07.26A1 affectedUnavailable Unavailable Unavailable None listed 17.12.20A1 affectedUnavailable Unavailable Unavailable None listed 19.12.10A1 affectedUnavailable Unavailable Unavailable None listed
DI-8200G
Vendor D-Link
Product DI-8200G
Platforms Unknown
Default status Unknown
DI-8200G · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 16.07.26A1 affectedUnavailable Unavailable Unavailable None listed 17.12.20A1 affectedUnavailable Unavailable Unavailable None listed 19.12.10A1 affectedUnavailable Unavailable Unavailable None listed
DI-8003
Vendor D-Link
Product DI-8003
Platforms Unknown
Default status Unknown
DI-8003 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 16.07.26A1 affectedUnavailable Unavailable Unavailable None listed 17.12.20A1 affectedUnavailable Unavailable Unavailable None listed 19.12.10A1 affectedUnavailable Unavailable Unavailable None listed
DI-8003G
Vendor D-Link
Product DI-8003G
Platforms Unknown
Default status Unknown
DI-8003G · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 16.07.26A1 affectedUnavailable Unavailable Unavailable None listed 17.12.20A1 affectedUnavailable Unavailable Unavailable None listed 19.12.10A1 affectedUnavailable Unavailable Unavailable None listed