CVE-2025-5571

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-77
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_42/42.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.311028Permissions Required, VDB Entry
• https://vuldb.com/?id.311028Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.588465Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

Jun 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55704Hidden functionality issue exists in multiple MFPs provided …6.9
• CVE-2025-55705This vulnerability occurs when the system permits multiple s…9.8
• CVE-2025-55706URL redirection to untrusted site ('Open Redirect') issue e…5.1
• CVE-2025-55707Incorrect Privilege Assignment vulnerability in WPXPO PostX …7.2
• CVE-2025-55708Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2025-55709Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-55710Insertion of Sensitive Information Into Sent Data vulnerabil…4.3
• CVE-2025-55711Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-55712Missing Authorization vulnerability in POSIMYTH The Plus Add…6.5
• CVE-2025-55713Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-55714Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-55715Insertion of Sensitive Information Into Sent Data vulnerabil…7.5