Vulnerability Details CVE-2025-29520
Incorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows authenticated attackers with low-level privileges to arbitrarily change the high-privileged account passwords and escalate privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 9.8%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2025-29520
-
cpe:2.3:h:dlink:dsl-7740c:-
-
cpe:2.3:o:dlink:dsl-7740c_firmware:6.tr069.20211230