CVE-2025-7407 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. This affects an unknown part of the file diag.cgi. The manipulation of…
Medium CVSS: 5.3

CVE-2025-7407

A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. This affects an unknown part of the file diag.cgi. The manipulation of the argument host_name leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early and confirmed the existence of the vulnerability. They reacted very quickly, professional and kind. This vulnerability only affects products that are no longer supported by the maintainer.
Vendor
Netgear
Product
D6400 Firmware
CWE
CWE-77
Yayın Tarihi
2025-07-10 14:15:27
Güncelleme
2025-07-16 16:41:50
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-77 D6400 Firmware MEDIUM Netgear 2025

Referanslar

https://github.com/wudipjq/my_vuln/blob/main/Netgear7/vuln_66/66.md https://github.com/wudipjq/my_vuln/blob/main/Netgear7/vuln_66/66.md#poc https://vuldb.com/?ctiid.315867 https://vuldb.com/?id.315867 https://vuldb.com/?submit.603668 https://www.netgear.com/ https://github.com/wudipjq/my_vuln/blob/main/Netgear7/vuln_66/66.md https://github.com/wudipjq/my_vuln/blob/main/Netgear7/vuln_66/66.md#poc