CVE-2025-14225

A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
References
Link Resource
https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-1/D-Link%20Vulnerability.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.334667 Permissions Required VDB Entry
https://vuldb.com/?id.334667 Third Party Advisory VDB Entry
https://vuldb.com/?submit.701774 Third Party Advisory VDB Entry
https://www.dlink.com/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dcs-930l_firmware:1.15.04:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-930l:-:*:*:*:*:*:*:*

History

11 Dec 2025, 00:07

Type Values Removed Values Added
First Time Dlink dcs-930l Firmware
Dlink
Dlink dcs-930l
CPE cpe:2.3:o:dlink:dcs-930l_firmware:1.15.04:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-930l:-:*:*:*:*:*:*:*
References () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-1/D-Link%20Vulnerability.md - () https://github.com/Madgeaaaaa/MY_VULN_2/blob/main/D-Link/vuln-1/D-Link%20Vulnerability.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.334667 - () https://vuldb.com/?ctiid.334667 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.334667 - () https://vuldb.com/?id.334667 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.701774 - () https://vuldb.com/?submit.701774 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product

08 Dec 2025, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-08 10:15

Updated : 2025-12-11 00:07


NVD link : CVE-2025-14225

Mitre link : CVE-2025-14225

CVE.ORG link : CVE-2025-14225


JSON object : View

Products Affected

dlink

  • dcs-930l
  • dcs-930l_firmware
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')