DI-500WF vulnerabilities

2 known vulnerabilities in DI-500WF from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  DI-500WF: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-9745Aug 31, 2025D-LinkEPSS 12.7%

  A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function of the file /version_upgrade.asp of the component jhttpd. The manipulation of the argument path leads to os command injection. The attack may

• 8.8 High severity

  DI-500WF: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-7194Jul 8, 2025D-LinkEPSS 1.02%

  A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file ip_position.asp of the component jhttpd. The manipulation of the argument ip leads to stack-based buf