Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-11407 1 D-link 1 Di-7001 Mini 2025-10-08 6.3 Medium
A weakness has been identified in D-Link DI-7001 MINI 24.04.18B1. Impacted is an unknown function of the file /upgrade_filter.asp. This manipulation of the argument path causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-11408 1 D-link 1 Di-7001 Mini 2025-10-08 8.8 High
A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown function of the file /dbsrv.asp. Such manipulation of the argument str leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.