CVE-2025-11488

CWE-74CWE-77 — Command Injection4 documents4 sources
Severity
6.9MEDIUM
EPSS
0.3%
top 43.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
D-link Dir-852
Timeline
PublishedOct 8

Description

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5d-link/dir-85220251002

🔴Vulnerability Details

2
GHSA
GHSA-gqq4-m3pp-v444: A weakness has been identified in D-Link DIR-852 up to 20251002↗2025-10-08
▶
CVEList
D-Link DIR-852 HNAP1 command injection↗2025-10-08
▶

🔍Detection Rules

1
Suricata
ET EXPLOIT D-Link HNAP SOAPAction Command Injection (CVE-2015-2051, CVE-2019-10891, CVE-2022,37056, CVE-2024-33112, CVE-2025-11488, CVE-2025-63932)↗2021-11-17
▶