PT-2025-34611 · D Link · Dsl-7740C

·

CVE-2025-29514

·

Published

2025-03-11

·

Updated

2025-08-29

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: D-Link DSL-7740C version DSL7740C.V6.TR069.20211230
Description: An incorrect access control issue exists in the config.xgi function of the device. This allows attackers to download the configuration file by submitting a crafted web request.
Recommendations: Apply a firmware update that addresses the access control issue in the config.xgi function.

Exploit

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-11434
CVE-2025-29514

Affected Products

Dsl-7740C