Vulnerability Description
A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-852 Firmware | 1.00cn_b09 |
| Dlink | Dir-852 | - |
Related Weaknesses (CWE)
References
- https://github.com/i-Corner/cve/issues/18ExploitIssue Tracking
- https://vuldb.com/?ctiid.322053Permissions RequiredVDB Entry
- https://vuldb.com/?id.322053Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.640590Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
- https://github.com/i-Corner/cve/issues/18ExploitIssue Tracking
FAQ
What is CVE-2025-9752?
CVE-2025-9752 is a vulnerability with a CVSS score of 7.3 (HIGH). A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument ser...
How severe is CVE-2025-9752?
CVE-2025-9752 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-9752?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-852 Firmware, Dlink Dir-852.