CVE-2025-29517

CWE-77Command Injection3 documents3 sources
Severity
6.8MEDIUM
EPSS
0.2%
top 54.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 25

Description

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9

Affected Packages1 packages

NVDdlink/dsl-7740c_firmware6.tr069.20211230

🔴Vulnerability Details

2
GHSA
GHSA-pjmh-r5fm-39x3: D-Link DSL-7740C with firmware DSL7740C2025-08-25
CVEList
CVE-2025-29517: D-Link DSL-7740C with firmware DSL7740C2025-08-25
CVE-2025-29517 (MEDIUM CVSS 6.8) | D-Link DSL-7740C with firmware DSL7 | cvebase.io