CVE-2025-7553

D-Link DIR-818LW System Time Page os command injection

CVSS 5.1 MEDIUMEPSS 4.2%CWE-77 CWE-78

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.1EPSS 4.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Jul 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

D-Link · DIR-818LW

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://vuldb.com/?ctiid.316251 https://vuldb.com/?id.316251 https://vuldb.com/?submit.614928 https://www.dlink.com/