D-Link Nuclias Connect < v1.3.1.4 Directory Traversal to Arbitrary File Deletion
Priority MEDIUM 41CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity and availability of the system.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00665 52nd percentileScored 2026-11-07
Fix Fixed Nuclias Connect (D-Link): 1.3.1.4
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| D-Link | Nuclias Connect | before 1.3.1.4 | 1.3.1.4 | Patch available | CNA |
- Nuclias Connect VendorD-Link Affected before 1.3.1.4 Fixed in 1.3.1.4 Patch available CNA
CPE names Threatist (inferred) · 1
Inferred from how NVD named this product before; not given by a source.
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dlink:nuclias_connect:*:*:*:*:*:*:*:* | — | — | D-Link Japan K.K. |
- cpe:2.3:a:dlink:nuclias_connect:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
Remediation
- Fix · CNA Nuclias Connect (D-Link) Fixed in 1.3.1.4
Timeline
- 2026-10-02 Threatist record created from CVE-2025-34248
- 2026-10-03 Alias added: GHSA-p6fr-xh6v-6wmv
- 2026-10-16 EPSS moved to the 50th–90th percentile
References
More D-Link vulnerabilities
- TI-2024-03070 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection KEVCVSS 3.1CRITICAL 9.8
- TI-2024-03069 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials KEVCVSS 3.1CRITICAL 9.8
- TI-2024-00708 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal KEVCVSS 3.1CRITICAL 9.8
- TI-2023-10693 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to… KEVCVSS 3.1CRITICAL 9.8
- TI-2022-17249 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable… KEVCVSS 3.1CRITICAL 9.8
- TI-2022-09657 D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE)… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-34248 · CVE Program
- CVE-2025-34248 · NVD
- FIRST EPSS
- GHSA-p6fr-xh6v-6wmv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences