Medium · 6.5 CVE-2025-57636 EUVD-2025-30920GHSA-gmr7-94jf-4hf8

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injection vulnerability vi…

Published Sep 23, 2025 · Updated Sep 24, 2025 · Assigned by mitre

Description

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time".

Advisories 1

WID-SEC-2025-2161 D-LINK Router: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 29, 2025

References

https://www.dlink.com/en/security-bulletin/
https://github.com/glkfc/IoT-Vulnerability/blob/main/D-Link/Dlink_1.md