Description
D-Link DIR-852是中国友讯（D-Link）公司的一款路由器。 D-Link DIR-852 20251002及之前版本存在命令注入漏洞，该漏洞源于对文件/HNAP1/的错误操作，可能导致命令注入攻击。
D-Link DIR-852 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2025-13562
https://cve.imfht.com/detail/CVE-2025-13562
https://www.cnvd.org.cn/flaw/show/CNVD-2025-24772
https://www.oscs1024.com/hd/MPS-xqep-rtnv
https://www.knowsafe.com/ti/info/0/1002962
https://github.com/YZS17/CVE/blob/main/DLink/DLink-DIR852/RCE2.md
https://nvd.nist.gov/vuln/detail/CVE-2025-13562
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10459
https://www.sentinelone.com/vulnerability-database/cve-2025-13562
https://vuldb.com/?submit.697063