CVE-2025-29516

CWE-77Command Injection3 documents3 sources
Severity
7.2HIGH
EPSS
0.6%
top 30.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 25

Description

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages1 packages

NVDdlink/dsl-7740c_firmware6.tr069.20211230

🔴Vulnerability Details

2
CVEList
CVE-2025-29516: D-Link DSL-7740C with firmware DSL7740C2025-08-25
GHSA
GHSA-73xp-557h-g742: D-Link DSL-7740C with firmware DSL7740C2025-08-25
CVE-2025-29516 (HIGH CVSS 7.2) | D-Link DSL-7740C with firmware DSL7 | cvebase.io