PT-2025-34935 · D Link · Dcs-825L

Shaunak Ganorkar · Published 2025-08-27 · Updated 2025-08-28 · CVE-2025-55582

Positive Technologies · (AI Summary)

CVSS v3.1

6.6

6.6

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

D-Link DCS-825L firmware versions prior to 1.09.02

Description:

The D-Link DCS-825L firmware contains a flaw in the watchdog script `mydlink-watch-dog.sh`. This script blindly respawns binaries, including `dcp` and `signalc`, without verifying their integrity, authenticity, or permissions. An attacker with local filesystem access can replace these binaries with malicious payloads. The script then executes these binaries as root in a continuous loop, resulting in persistent privilege escalation and arbitrary code execution.

Recommendations:

Update to firmware version 1.09.02 or later.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-494

CWE-269

Related Identifiers

CVE-2025-55582

Affected Products

Dcs-825L

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-55582 · Security Note
• https://twitter.com/VulmonFeeds/status/1960934412859715713 · Twitter Post
• https://t.me/CVEtracker/31068 · Telegram Post
• https://twitter.com/CVEnew/status/1960803264552714375 · Twitter Post
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10431 · Note
• https://cybermaya.in/posts/Post-43 · Note
• https://dlink.com/en/security-bulletin · Note