CNNVD-202511-1565 Information

CNNVD ID

CNNVD-202511-1565

CVE-2025-60672

  • CNNVD Published: 2025-11-13

Description (Chinese)

D-Link DIR-878是中国友讯(D-Link)公司的一款无线路由器。 D-Link DIR-878 A1_FW101B04.bin版本存在安全漏洞,该漏洞源于SetDynamicDNSSettings功能中ServerAddress和Hostname参数未经验证,可能导致远程命令执行。

Description (English)

D-Link DIR-878 is a wireless router for the Chinese company D-Link. The D-Link DIR-878 A1 FW101B04.bin version contains a security loophole that results from the unverAddress and Hostname parameters in the SetDynamicDNSSettings function, which may result in remote command execution.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

友讯

Published

2025-11-13

Last Modified

2026-02-24

References

http://d-link.com https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60672.md https://www.dlink.com/en https://www.dlink.com/en/security-bulletin/ https://access.redhat.com/security/cve/cve-2025-60672

Share on: