CVE-2025-44084
Published: 20 May 2025
Summary
CVE-2025-44084 is a critical-severity Command Injection (CWE-77) vulnerability in Dlink Di-8100G Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 15.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
D-Link DI-8100 firmware version 16.07.26A1 is affected by a command injection vulnerability tracked as CVE-2025-44084 and CWE-77. The flaw resides in the device's web interface and carries a CVSS 3.1 score of 9.8, reflecting network-accessible exploitation without authentication or user interaction.
An unauthenticated remote attacker can exploit the issue by submitting crafted HTTP requests that trigger arbitrary command execution, resulting in a root shell on the underlying firmware. This grants full control over the device, including the ability to modify configuration, intercept traffic, or pivot further into attached networks.
Public references consist of technical write-ups hosted on GitHub that demonstrate the injection vector; no vendor advisory or patch information is included in the available sources. The associated EPSS score remains flat at 0.0205 with no observed increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-15874
Vulnerability details
D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.