D-Link Di-7400g+ Firmware vulnerabilities

12 CVEs affecting D-Link Di-7400g+ Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15357, published 2025-12-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9769, published 2025-09-01. Medium severity, CVSS 6.2. EPSS: 29% chance of exploitation in the next 30 days. A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345…
CVE-2025-15357, published 2025-12-30. Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the file /msp_info.htm?flag=cmd. The manipulation of the argument cmd results in command injection. The…
CVE-2025-57105, published 2025-08-22. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub_478D28 function in in mng_platform.asp, and sub_4A12DC function…
CVE-2023-45574, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…
CVE-2023-45573, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…
CVE-2023-45580, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…
CVE-2023-45579, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…
CVE-2023-45578, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…
CVE-2023-45577, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…
CVE-2023-45576, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…

Latest

CVE-2023-45575, published 2023-10-16. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before,…