Skip to content
OpenAdvisories
Low WID-SEC-2025-1092 2 CVEs

D-LINK DAP-2695 Router: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published May 18, 2025 · Updated May 18, 2025 · de-DE

Vendor: D-Link Product: Router

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in D-LINK DAP-2695 Routern ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 2

  • Low 2.4
    CVE-2025-4859

    D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting

    A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been rated as problematic. This issue affects some unknown processing of the file /adv_macbypass.php of the component MAC Bypass Settings Page. The manipulation of the argument f_…

    D-Link DAP-2695 Network devices
  • Low 2.4
    CVE-2025-4860

    D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting

    A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Affected is an unknown function of the file /adv_dhcps.php of the component Static Pool Settings Page. The manipulation of the argument f_mac leads to cros…

    D-Link DAP-2695 Network devices

Revision history

  1. #1

    Initiale Fassung

References