D-Link DSL-7740c Firmware vulnerabilities

10 CVEs affecting D-Link DSL-7740c Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-29523, published 2025-08-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-29516, published 2025-08-25. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function.
CVE-2025-29523, published 2025-08-25. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function.
CVE-2025-29519, published 2025-08-25. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a crafted GET request.
CVE-2025-29517, published 2025-08-25. Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days. D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function.
CVE-2025-29522, published 2025-08-25. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function.
CVE-2025-29515, published 2025-08-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database,…
CVE-2025-29514, published 2025-08-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web…
CVE-2025-29521, published 2025-08-25. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attack.
CVE-2025-29520, published 2025-08-25. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Incorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows authenticated attackers with low-level privileges to arbitrarily change the…
CVE-2020-12774, published 2020-07-22. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command.