CNNVD-202512-979 Information

CNNVD ID

CNNVD-202512-979

CVE-2025-14225

  • CNNVD Published: 2025-12-08

Description (Chinese)

D-Link DCS-930L是中国友讯(D-Link)公司的一款网络摄像机。 D-Link DCS-930L 1.15.04版本存在命令注入漏洞,该漏洞源于对文件/setSystemAdmin中参数AdminID的错误操作,可能导致命令注入攻击。

Description (English)

D-Link DCS-930L is a web-based video camera of the Chinese company D-Link. Version 1.15.04 of D-Link DCS-930L 1.15.04 contains a command-injecting loophole, which stems from the wrong operation of AdminID, the parameter in file/setSystemAdmin, which may lead to an order-injection attack.

Hazard Level

High

Vulnerability Type

命令注入

Affected Vendor

友讯

Published

2025-12-08

Last Modified

2026-02-24

References

https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-1/D-Link%20Vulnerability.md https://vuldb.com/?ctiid.334667 https://vuldb.com/?id.334667 https://vuldb.com/?submit.701774 https://www.dlink.com/

Share on: