CVE-2025-9769: D-Link Di-7400g+ Firmware

Medium severity, CVSS 6.2. EPSS: 29% chance of exploitation in the next 30 days.

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. An attack on the physical device is feasible. The exploit has been released to the public and may be exploited.

Affected products

• D-Link Di-7400g+ Firmware: version 19.12.25a1 only

Published 2025-09-01. Last modified 2026-06-17.