PT-2025-36565 · D Link · Dir-823

Qmssdxn · Publicado 2025-09-02 · Atualizado 2025-09-14 · CVE-2025-10123

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions up to 250416

Description A vulnerability exists in D-Link DIR-823X routers that allows for remote command injection. The vulnerability is located in the sub 415028 function of the /goform/set static leases file. Manipulation of the Hostname argument can lead to command injection, potentially granting unauthenticated attackers full device control. The exploit for this issue has been publicly disclosed.

Recommendations D-Link DIR-823X versions up to 250416: Update the firmware to address the vulnerability. D-Link DIR-823X versions up to 250416: Disable WAN administration access. D-Link DIR-823X versions up to 250416: Restrict management access to the LAN.

Exploit

Correção

RCE

Special Elements Injection

Command Injection

Enumeração de Fraquezas

CWE-74

CWE-77

Identificadores relacionados

BDU:2025-11534

CVE-2025-10123

Produtos afetados

Dir-823

Referências · 17

• 🔥 https://github.com/lin-3-start/lin-cve/blob/main/DIR-823X/D-Link%20DIR-823X%20routers%20have%20an%20unauthorized%20command%20execution%20vulnerability.md#poc · Exploit
• 🔥 https://github.com/lin-3-start/lin-cve/blob/main/DIR-823X/D-Link%20DIR-823X%20routers%20have%20an%20unauthorized%20command%20execution%20vulnerability.md · Exploit
• https://twitter.com/CVEnew/status/1965255296273780924 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1965264381626683565 · Publicação no Twitter
• https://twitter.com/BaseFortify/status/1965354812469641468 · Publicação no Twitter
• https://vuldb.com/?id.323093 · Nota
• https://vuldb.com/?submit.645712 · Nota
• https://dlink.com · Nota
• https://osv.dev/vulnerability/CVE-2025-10123 · Aviso do Fabricante
• https://twitter.com/cracbot/status/1967181600959180829 · Publicação no Twitter
• https://t.me/cveNotify/134733 · Publicação no Telegram
• https://twitter.com/ZeroPathLabs/status/1965262907916104041 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-10123 · Nota de Segurança
• https://t.me/CVEtracker/32038 · Publicação no Telegram
• https://twitter.com/RedPacketSec/status/1965429825931219065 · Publicação no Twitter