high7.2
CVE-2025-34248
D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper…
Impact
D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | D-Link Nuclias Connect Firmware | before 1.3.1.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.