CVE-2025-15245 | D-Link DCS-850L 1.02.09 Firmware Update Service uploadfirmware DownloadFile path traversal

A vulnerability, which was classified as critical, was found in D-Link DCS-850L 1.02.09. Affected is the function uploadfirmware of the component Firmware Update Service. The manipulation of the argument DownloadFile results in path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is cataloged as CVE-2025-15245. The attack must originate from the local network. Furthermore, there is an exploit available.