Description
Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password.
Critical · 9.8
CVE-2025-29515
EUVD-2025-25743GHSA-prjv-p6ff-2r98
Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to mod…
Published Aug 25, 2025 · Updated Aug 25, 2025 · Assigned by mitre