A vulnerability described as critical has been identified in D-Link DI-7400G+ 19.12.25A1. Affected is the function
sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection.
This vulnerability was named CVE-2025-9769. An attack on the physical device is feasible. In addition, an exploit is available.
