CVE-2025-57636

published 2025-09-23

CVE-2025-57636: OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter…

medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time".

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	di-7100g_firmware	—	—

CWE-78