CVE-2025-1104

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287 CWE-290

Affected software

Vendor	Product	Versions
D-Link	DHP-W310AV	1.04

References

https://github.com/kn1g78/cve/blob/main/dlink.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.294934Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.294934Third Party Advisory, VDB Entry
https://vuldb.com/?submit.489958Third Party Advisory, VDB Entry
https://www.dlink.com/Product
https://github.com/kn1g78/cve/blob/main/dlink.mdExploit, Third Party Advisory

Timeline

Published: Feb 7, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-110409.8A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file CVE-2025-110418.8A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file CVE-2025-110427.5An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1,CVE-2025-110437.4An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 CVE-2025-110446.8An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior CVE-2025-110457.3A vulnerability was identified in WAYOS LQ_04, LQ_05, LQ_06, LQ_07 and LQ_09 22.03.17. This affects an unknown function of the file /usb_pas CVE-2025-110469.8A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initializatio CVE-2025-110478.8A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipu CVE-2025-110488.8A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of CVE-2025-110498.8A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao CVE-2025-11056.1A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of t CVE-2025-110508.8A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /periodo-lancamento. Executing manipulatio