CVE-2025-15081 | JD Cloud BE6500 4.4.1.r4308 /jdcapi sub_4780 ddns_name command injection

A vulnerability classified as critical was found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub_4780 of the file /jdcapi. Such manipulation of the argument ddns_name leads to command injection.

This vulnerability is listed as CVE-2025-15081. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.