Details of VAR-202508-2643

ID

VAR-202508-2643

CVE

CVE-2018-25115

TITLE

plural D-Link Corporation In the product OS Command injection vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2025-015018

DESCRIPTION

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC. DIR-110 firmware, DIR-412 firmware, DIR-600 firmware etc. D-Link Corporation The product has OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2018-25115 // JVNDB: JVNDB-2025-015018

AFFECTED PRODUCTS

vendor:	dlink	model:	dir-600	scope:	eq	version:	-	Trust: 1.0
vendor:	dlink	model:	dir-615	scope:	eq	version:	-	Trust: 1.0
vendor:	dlink	model:	dir-645	scope:	eq	version:	-	Trust: 1.0
vendor:	dlink	model:	dir-815	scope:	eq	version:	1.03	Trust: 1.0
vendor:	dlink	model:	dir-412	scope:	eq	version:	-	Trust: 1.0
vendor:	dlink	model:	dir-110	scope:	eq	version:	-	Trust: 1.0
vendor:	dlink	model:	dir-610	scope:	eq	version:	-	Trust: 1.0
vendor:	d link	model:	dir-645	scope:	-	version:	-	Trust: 0.8
vendor:	d link	model:	dir-615	scope:	-	version:	-	Trust: 0.8
vendor:	d link	model:	dir-600	scope:	-	version:	-	Trust: 0.8
vendor:	d link	model:	dir-815	scope:	-	version:	-	Trust: 0.8
vendor:	d link	model:	dir-110	scope:	-	version:	-	Trust: 0.8
vendor:	d link	model:	d-link dir-610	scope:	-	version:	-	Trust: 0.8
vendor:	d link	model:	dir-412	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2025-015018 // NVD: CVE-2018-25115

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-25115
value:	CRITICAL
Trust: 1.0
disclosure@vulncheck.com:	CVE-2018-25115
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2018-25115
value:	CRITICAL
Trust: 0.8

nvd@nist.gov:	CVE-2018-25115
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2018-25115
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2025-015018 // NVD: CVE-2018-25115 // NVD: CVE-2018-25115

PROBLEMTYPE DATA

problemtype:	CWE-78	Trust: 1.0
problemtype:	OS Command injection (CWE-78) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2025-015018 // NVD: CVE-2018-25115

EXTERNAL IDS

db:	NVD	id:	CVE-2018-25115	Trust: 2.6
db:	EXPLOIT-DB	id:	43496	Trust: 1.8
db:	JVNDB	id:	JVNDB-2025-015018	Trust: 0.8

sources: JVNDB: JVNDB-2025-015018 // NVD: CVE-2018-25115

REFERENCES

url:	https://github.com/cr0n1c/dlink_shell_poc/blob/master/dlink_auth_rce	Trust: 1.8
url:	https://legacy.us.dlink.com/	Trust: 1.8
url:	https://support.dlink.com/endoflifepolicy.aspx	Trust: 1.8
url:	https://www.exploit-db.com/exploits/43496	Trust: 1.8
url:	https://www.vulncheck.com/advisories/dlink-dir-rce-service-cgi	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-25115	Trust: 0.8

sources: JVNDB: JVNDB-2025-015018 // NVD: CVE-2018-25115

SOURCES

db:	JVNDB	id:	JVNDB-2025-015018
db:	NVD	id:	CVE-2018-25115

LAST UPDATE DATE

2025-10-05T23:18:25.626000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2025-015018	date:	2025-10-03T08:58:00
db:	NVD	id:	CVE-2018-25115	date:	2025-09-24T18:03:34.613

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2025-015018	date:	2025-10-03T00:00:00
db:	NVD	id:	CVE-2018-25115	date:	2025-08-27T22:15:31.370