CVE-2025-1800

A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-74
• CWE-77
• CWE-77

• https://github.com/sjwszt/CVE/blob/main/CVE_1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.298030Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.298030Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.502971Third Party Advisory, VDB Entry
• https://www.dlink.com/Product
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10354Vendor Advisory
• https://github.com/sjwszt/CVE/blob/main/CVE_1.mdExploit, Third Party Advisory

Published

Mar 1, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1794The AM LottiePlayer plugin for WordPress is vulnerable to St…5.4
• CVE-2025-1795During an address list folding when a separating comma ends …2.3
• CVE-2025-1796A vulnerability in langgenius/dify v0.10.1 allows an attacke…8.8
• CVE-2025-1797A vulnerability, which was classified as critical, has been …6.3
• CVE-2025-1798The does not sanitise and escape some parameters when outpu…6.1
• CVE-2025-1799A vulnerability, which was classified as critical, was found…6.3
• CVE-2025-1801A flaw was found in the Ansible aap-gateway. Concurrent requ…8.1
• CVE-2025-1802The HT Mega – Absolute Addons For Elementor plugin for WordP…5.4
• CVE-2025-1803Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-1804A vulnerability was found in Blizzard Battle.Net up to 2.39.…7.3
• CVE-2025-1805Crypt::Salt for Perl version 0.01 uses insecure rand() funct…5.3
• CVE-2025-1806A vulnerability, which was classified as problematic, has be…5.3