by Kastro
Paper/Archive/CVE-2025-44084

CVE-2025-44084

mitre — D-link DI-8100 16.07.26A1 is vulnerable to Command Injection.

EPSS 23%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.7.977 × 2019.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/piposy/IOTsec/blob/main/Dlink/DI8100/DI8100-A1-2.md