CVE-2025-29517

EUVD-2025-25786
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
6.8 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Affected Products (NVD)
VendorProductVersion
dlinkdsl-7740c_firmware
6.tr069.20211230:tr069.20211230
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gist.github.com/stevenyu113228/8ddb33c26f3a5987f5382a3d7744c241
https://www.dlink.com/en/security-bulletin/