PT-2025-34473 · D Link · Dcs-825L

Shaunak Ganorkar · Published 2025-06-20 · Updated 2025-08-23 · CVE-2025-55581

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-825L firmware versions prior to 1.08.01

Description: The D-Link DCS-825L firmware contains an insecure implementation in the mydlink-watch-dog.sh script. This script monitors and restarts the dcp and signalc binaries without verifying their integrity, origin, or permissions. An attacker gaining filesystem access can replace these binaries to execute arbitrary code persistently with root privileges. The issue arises from a lack of executable trust and integrity checks within the watchdog logic.

Recommendations: Update to a firmware version newer than 1.08.01. As a temporary workaround, restrict filesystem access to prevent unauthorized modification of the dcp and signalc binaries.

Exploit

Fix

Missing Authentication

Improper Privilege Management

Weakness Enumeration

CWE-306

CWE-494

CWE-269

Related Identifiers

BDU:2025-12533

CVE-2025-55581

Affected Products

Dcs-825L

References · 10

• 🔥 https://cybermaya.in/posts/Post-42 · Exploit
• https://osv.dev/vulnerability/CVE-2025-55581 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12533 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-55581 · Security Note
• https://twitter.com/CVEnew/status/1958964682691420414 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1959113667410014616 · Twitter Post
• https://t.me/cveNotify/133217 · Telegram Post
• https://legacy.us.dlink.com/pages/product.aspx?id=f9c0458bfe7b4ff3bf7fad1cf6fcc9a1 · Note
• https://dlink.com/en/security-bulletin · Note
• https://t.me/CVEtracker/30715 · Telegram Post