Medium severity · published Feb 17, 2025
CVE-2025-1392
D-Link DIR-816 index.html cross site scripting
5.4
CVSS
8.7%
EPSS
No
On KEV
Description
A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G_basic. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)8.7% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
DIR-816 · D-Link
1.01TO · source: vendor
DF
Dir-816 Firmware · Dlink
1.01to · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-1392
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-1392
Permissions Required
https://vuldb.com/?ctiid.296023
Third Party Advisory
https://vuldb.com/?id.296023
Third Party Advisory
https://vuldb.com/?submit.501351
Product
https://www.dlink.com/
More from DIR-816
9.8
CVE-2026-4184
D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow
9.8
CVE-2026-4183
D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow
9.8
CVE-2026-4182
D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow
9.8
CVE-2026-4181
D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow
9.8
CVE-2026-4180
D-Link DIR-816 goahead redirect.asp access control