CVE-2025-10441: D-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injection

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-15 · updated 2026-10-18
Weakness: CWE-77

Description

A vulnerability was found in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub_433F7C of the file version_upgrade.asp of the component jhttpd. The manipulation of the argument path results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used.

Affected products

D-Link DI-8003G: 17.12.20A1, 19.12.10A1
D-Link DI-8100G: 17.12.20A1, 19.12.10A1
D-Link DI-8200G: 17.12.20A1, 19.12.10A1

References

https://github.com/2664521593/mycve/blob/main/D-Link/D-Link_CJ_2.md
https://github.com/2664521593/mycve/blob/main/D-Link/D-Link_CJ_2.md#poc
https://vuldb.com/?ctiid.323875
https://vuldb.com/?id.323875
https://vuldb.com/?submit.647837
https://www.dlink.com/

Get alerted when CVE-2025-10441 or the next vulnerability affects your stack