PT-2025-46889 · D Link · D-Link Dir-878A1

CVE-2025-60676 · Publicado 2025-11-12 · Atualizado 2025-11-23

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-878A1 router firmware versions prior to FW101B04

Description An unauthenticated command injection issue exists in the D-Link DIR-878A1 router firmware. The problem is located in the SetNetworkSettings functionality within the prog.cgi script. The IPAddress and SubnetMask parameters are directly incorporated into shell commands executed using the system() function. An attacker can remotely execute arbitrary commands on the device by sending a crafted HTTP request, without needing authentication. The vulnerability stems from a lack of input sanitization on the management level.

Recommendations Update the router firmware to version FW101B04 or later.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2025-14690

CVE-2025-60676

Produtos afetados

D-Link Dir-878A1

Referências · 10

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60676.md · Exploit
• https://bdu.fstec.ru/vul/2025-14690 · Nota de Segurança
• https://t.me/true_secator/7652 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-60676 · Nota de Segurança
• http://d-link.com · Nota
• https://osv.dev/vulnerability/CVE-2025-60676 · Aviso do Fabricante
• https://dlink.com/en/security-bulletin · Aviso do Fabricante
• https://dlink.com/en · Nota
• https://t.me/CSIRT_italia/2925 · Publicação no Telegram
• https://twitter.com/rfwaveio/status/1992598423418347753 · Publicação no Twitter