CVE-2025-1392

Summary

CVE-2025-1392 is a newly discovered vulnerability affecting the D-Link DIR-816 1.01TO router. The issue lies within an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G_basic.html. Manipulation of the argument SSID results in a cross-site scripting (XSS) attack, which can be executed remotely. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. Importantly, this vulnerability only affects unsupported D-Link DIR-816 1.01TO routers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.