A vulnerability was found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1 and classified as critical. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection.
This vulnerability is traded as CVE-2025-12313. The attack may be launched remotely. Furthermore, there is an exploit available.