PT-2025-34935 · D Link · Dcs-825L

Shaunak Ganorkar · Published 2025-06-24 · Updated 2025-09-09 · CVE-2025-55582

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DCS-825L firmware versions prior to 1.09.02

Description: The D-Link DCS-825L firmware contains a flaw in the watchdog script mydlink-watch-dog.sh. This script blindly respawns binaries, including dcp and signalc, without verifying their integrity, authenticity, or permissions. An attacker with local filesystem access can replace these binaries with malicious payloads. The script then executes these binaries as root in a continuous loop, resulting in persistent privilege escalation and arbitrary code execution.

Recommendations: Update to firmware version 1.09.02 or later.

Exploit

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-494

Related Identifiers

BDU:2025-12530

CVE-2025-55582

Affected Products

Dcs-825L

References · 12

• 🔥 https://cybermaya.in/posts/Post-43 · Exploit
• https://bdu.fstec.ru/vul/2025-12530 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55582 · Security Note
• https://t.me/cveNotify/133942 · Telegram Post
• https://t.me/CVEtracker/31068 · Telegram Post
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10431 · Note
• https://t.me/cveNotify/133850 · Telegram Post
• https://t.me/cveNotify/134777 · Telegram Post
• https://dlink.com/en/security-bulletin · Note
• https://twitter.com/CVEnew/status/1960803264552714375 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1960934412859715713 · Twitter Post