A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-878/dllog.md | Broken Link |
| https://vuldb.com/?ctiid.291924 | Permissions Required VDB Entry |
| https://vuldb.com/?id.291924 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.475011 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Jul 2025, 14:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-878_firmware:1.03:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Dlink dir-878
Dlink Dlink dir-878 Firmware |
|
| References | () https://vuldb.com/?id.291924 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.291924 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.475011 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product | |
| References | () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-878/dllog.md - Broken Link |
15 Jan 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-15 19:15
Updated : 2025-07-16 14:56
NVD link : CVE-2025-0481
Mitre link : CVE-2025-0481
JSON object : View
Products Affected
dlink
- dir-878_firmware
- dir-878