D Link · D-Link Dir-816 A2 · CVE-2025-45931
Name of the Vulnerable Software and Affected Versions:
D-Link DIR-816-A2 version DIR-816A2 FWv1.10CNB05 R1B011D88210
Description:
An issue in the D-Link DIR-816-A2 allows a remote attacker to execute arbitrary code via the `system()` function in the `bin/goahead` file. This enables the attacker to run malicious code on the affected device. The estimated number of potentially affected devices and details about real-world incidents where this issue was exploited are not provided.
Recommendations:
As a temporary workaround, consider disabling the `system()` function in the `bin/goahead` file until a patch is available. Restrict access to the `bin/goahead` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.