PT-2025-12719 · D Link · D-Link Dir-823G

Sta8R9 · Published 2025-03-06 · Updated 2025-03-25 · CVE-2025-2717

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126/240802

Description A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the function sub 41710C of the file /goform/diag nslookup. The manipulation of the target addr argument leads to os command injection. This issue can be exploited remotely.

Recommendations For D-Link DIR-823X versions 240126/240802, as a temporary workaround, consider disabling the sub 41710C function until a patch is available. Restrict access to the /goform/diag nslookup file to minimize the risk of exploitation. Avoid using the target addr argument in the affected HTTP POST Request Handler until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2025-05474

CVE-2025-2717

Affected Products

D-Link Dir-823G

References · 11

• 🔥 https://github.com/mono7s/Dir-823x/blob/main/diag_nslookup/diag_nslookup.md · Exploit
• https://bdu.fstec.ru/vul/2025-05474 · Security Note
• https://osv.dev/vulnerability/CVE-2025-2717 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2717 · Security Note
• https://vuldb.com/?id.300737 · Note
• https://vuldb.com/?submit.517958 · Note
• https://dlink.com · Note
• https://t.me/cvetracker/19814 · Telegram Post
• https://twitter.com/CVEnew/status/1904317720646062093 · Twitter Post
• https://t.me/cvedetector/21017 · Telegram Post
• https://vuldb.com/?ctiid.300737 · Note