CVE-2025-5492: D-Link DI-500WF-WT /usr/sbin/jhttpd msp_info.htm sub_456DE8 command injection

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-03 · updated 2026-06-17
Weakness: CWE-74

Description

A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub_456DE8 of the file /msp_info.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack can be launched remotely.

Affected products

D-Link DI-500WF-WT: through 20250511

References

https://vuldb.com/?ctiid.310909
https://vuldb.com/?id.310909
https://vuldb.com/?submit.575244
https://www.dlink.com/

Get alerted when CVE-2025-5492 or the next vulnerability affects your stack