CVE-2025-34248 in Nuclias Connectinformação

Sumário

de MITRE • 10/10/2025

D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

VulnCheck

Reservar

15/04/2025

Divulgação

10/10/2025

Moderação

aceite

Entrada

VDB-327814

CPE

pronto

EPSS

0.00606

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-34248
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-34248
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-34248/

◂ VoltarVisão GeralPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!