CVE-2025-29165

CRITICAL EPSS 45.8%
Published Mar 5, 20263mo ago · Modified Jun 17, 20262w ago
9.8 CVSS 3.1
Critical
Find Similar
Published Mar 5, 2026 3mo ago
Last Modified Jun 17, 2026 2w ago

Description

An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component

CVSS Details

Base Score
9.8
Exploitability
3.9
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
45.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-269 Improper Privilege Management Authorization

Affected Products 2

VendorProductVersionRange
dlinkdir-1253_firmware1.6.1684any
dlinkdir-1253*any

References 4

  • codeberg.org https://codeberg.org/zuhri/advisory/src/branch/main/CVE-2025-29165
    Broken Link
  • github.com https://github.com/twentysevns/Vuln-IoT-Reports/blob/main/DLINK/DIR-1253/README.md
    Broken Link
  • dlink.com https://www.dlink.com/en/security-bulletin/
    Product
  • zuh.re https://zuh.re/cve/2025-29165/
    Broken Link

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.