A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
References
| Link | Resource |
|---|---|
| https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-1/D-Link%20Vulnerability.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.334667 | Permissions Required VDB Entry |
| https://vuldb.com/?id.334667 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.701774 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Dec 2025, 00:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink dcs-930l Firmware
Dlink Dlink dcs-930l |
|
| CPE | cpe:2.3:o:dlink:dcs-930l_firmware:1.15.04:*:*:*:*:*:*:* cpe:2.3:h:dlink:dcs-930l:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-1/D-Link%20Vulnerability.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.334667 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.334667 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.701774 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product |
08 Dec 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-08 10:15
Updated : 2025-12-11 00:07
NVD link : CVE-2025-14225
Mitre link : CVE-2025-14225
CVE.ORG link : CVE-2025-14225
JSON object : View
Products Affected
dlink
- dcs-930l
- dcs-930l_firmware
