CVE-2025-10441 | D-Link DI-8100G/DI-8200G/DI-8003G 17.12.20A1/19.12.10A1 jhttpd version_upgrade.asp sub_433F7C path os command injection

A vulnerability described as critical has been identified in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub_433F7C of the file version_upgrade.asp of the component jhttpd. The manipulation of the argument path results in os command injection.

This vulnerability is cataloged as CVE-2025-10441. The attack may be launched remotely. Furthermore, there is an exploit available.