D-Link Di-7300G+ vulnerabilities

4 known vulnerabilities affecting d-link/di-7300g+.

Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM4

Vulnerabilities

Page 1 of 1
CVE-2025-6898MEDIUMCVSS 5.3v19.12.25A12025-06-30
CVE-2025-6898 [MEDIUM] CWE-77 CVE-2025-6898: A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Af A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxy_client.asp. The manipulation of the argument proxy_srv/proxy_lanport/proxy_lanip/proxy_srvport leads to os command injection. The attack may be launched remotely. The exploit has bee
cvelistv5nvd
CVE-2025-6897MEDIUMCVSS 5.1v19.12.25A12025-06-30
CVE-2025-6897 [MEDIUM] CWE-77 CVE-2025-6897: A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vu A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used.
cvelistv5nvd
CVE-2025-6896MEDIUMCVSS 5.3v19.12.25A12025-06-30
CVE-2025-6896 [MEDIUM] CWE-77 CVE-2025-6896: A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
cvelistv5nvd
CVE-2025-6899MEDIUMCVSS 5.3v17.12.20A1v19.12.25A12025-06-30
CVE-2025-6899 [MEDIUM] CWE-77 CVE-2025-6899: A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12. A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file msp_info.htm. The manipulation of the argument flag/cmd/iface leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be
cvelistv5nvd