CVE-2025-6897: D-Link Di-7300g+ Firmware

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used.

Affected products

• D-Link Di-7300g+ Firmware: version 19.12.25a1 only

Published 2025-06-30. Last modified 2026-06-17.