ID
VAR-202507-0585
CVE
CVE-2025-7553
TITLE
D-Link Systems, Inc. of DIR-818LW Command injection vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. D-Link Systems, Inc. of DIR-818LW The firmware contains a command injection vulnerability. OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The D-Link DIR-818LW is a dual-band Gigabit cloud router that supports IEEE 802.11ac and IEEE 802.11n wireless standards, with wireless transmission speeds up to 433Mbps. It also provides one USB 2.0 port and four Gigabit wired ports. The D-Link DIR-818LW is vulnerable to a command injection vulnerability caused by the NTP Server parameter in the System Time Page component failing to properly sanitize special characters and commands in constructed commands. No detailed vulnerability details are currently available
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dlink | model: | dir-818lw | scope: | lt | version: | 20191215 | Trust: 1.0 |
| vendor: | d link | model: | dir-818lw | scope: | - | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dir-818lw | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dir-818lw | scope: | eq | version: | dir-818lw firmware 20191215 | Trust: 0.8 |
| vendor: | d link | model: | dir-818lw | scope: | lte | version: | <=20191215 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-77 | Trust: 1.0 |
| problemtype: | CWE-78 | Trust: 1.0 |
| problemtype: | Command injection (CWE-77) [ others ] | Trust: 0.8 |
| problemtype: | OS Command injection (CWE-78) [ others ] | Trust: 0.8 |
| problemtype: | OS Command injection (CWE-78) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-7553 | Trust: 3.2 |
| db: | VULDB | id: | 316251 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2025-010356 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-18503 | Trust: 0.6 |
REFERENCES
| url: | https://vuldb.com/?id.316251 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.614928 | Trust: 1.8 |
| url: | https://www.dlink.com/ | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-7553 | Trust: 1.4 |
| url: | https://vuldb.com/?ctiid.316251 | Trust: 1.0 |
SOURCES
| db: | CNVD | id: | CNVD-2025-18503 |
| db: | JVNDB | id: | JVNDB-2025-010356 |
| db: | NVD | id: | CVE-2025-7553 |
LAST UPDATE DATE
2025-08-15T23:13:38.002000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-18503 | date: | 2025-08-14T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010356 | date: | 2025-07-31T08:53:00 |
| db: | NVD | id: | CVE-2025-7553 | date: | 2025-07-18T13:10:55.620 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-18503 | date: | 2025-08-14T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010356 | date: | 2025-07-31T00:00:00 |
| db: | NVD | id: | CVE-2025-7553 | date: | 2025-07-14T00:15:25.347 |