A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.327218 | Permissions Required VDB Entry |
| https://vuldb.com/?id.327218 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.664597 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
| https://www.yuque.com/jh0ng/vmpda6/fpqlhpkb0orgseav | Permissions Required |
| https://www.yuque.com/jh0ng/vmpda6/fpqlhpkb0orgseav#DOhrV | Permissions Required |
Configurations
Configuration 1 (hide)
| AND |
|
History
19 Nov 2025, 21:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink di-7100g C1 Firmware
Dlink di-7100g C1 Dlink |
|
| References | () https://vuldb.com/?ctiid.327218 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.327218 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.664597 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product | |
| References | () https://www.yuque.com/jh0ng/vmpda6/fpqlhpkb0orgseav - Permissions Required | |
| References | () https://www.yuque.com/jh0ng/vmpda6/fpqlhpkb0orgseav#DOhrV - Permissions Required | |
| CPE | cpe:2.3:o:dlink:di-7100g_c1_firmware:2025-09-28:*:*:*:*:*:*:* cpe:2.3:h:dlink:di-7100g_c1:-:*:*:*:*:*:*:* |
06 Oct 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-06 13:15
Updated : 2025-11-19 21:48
NVD link : CVE-2025-11335
Mitre link : CVE-2025-11335
CVE.ORG link : CVE-2025-11335
JSON object : View
Products Affected
dlink
- di-7100g_c1_firmware
- di-7100g_c1