CVE-2025-4843
Last modified
CVE-2025-4843 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. EPSS estimates a 1.02% chance of exploitation in the next 30 days.
Description
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the argument CameraName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dcs-932l Firmware | 2.18.01 |
References
- https://vuldb.com/?ctiid.309309Permissions Required, VDB Entry
- https://vuldb.com/?id.309309Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.574926Third Party Advisory, VDB Entry
- https://www.dlink.com/Product
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-4843?
How severe is CVE-2025-4843?
How do I fix CVE-2025-4843?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-48424Rejected reason: Not used
- CVE-2025-48425Rejected reason: Not used
- CVE-2025-48426Rejected reason: Not used
- CVE-2025-48427Rejected reason: Not used
- CVE-2025-48428Cleartext Storage of Sensitive Information (CWE-312) in the …6.7
- CVE-2025-48429An out-of-bounds read vulnerability exists in the RLECodec::…9.1
- CVE-2025-48430Uncaught Exception (CWE-248) in the Command Centre Server al…5.5
- CVE-2025-48431Mismatched Memory Management Routines vulnerability in Apach…7.5
- CVE-2025-48432An issue was discovered in Django 5.2 before 5.2.3, 5.1 befo…5.3
- CVE-2025-4844A vulnerability classified as critical was found in FreeFloa…9.8
- CVE-2025-48443Trend Micro Password Manager (Consumer) version 5.0.0.1266 a…6.6
- CVE-2025-48444Missing Authorization vulnerability in Drupal Quick Node Blo…5.3
Are you affected by CVE-2025-4843?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST