PT-2025-3922 · D Link · D-Link Dir-823G

Hand_King · Published 2025-01-06 · Updated 2025-01-15 · CVE-2025-0492

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126/240802

Description A critical vulnerability has been found, affecting the function FUN 00412244. This issue leads to a null pointer dereference and can be exploited remotely. The exploit has been disclosed to the public.

Recommendations For D-Link DIR-823X versions 240126/240802, as a temporary workaround, consider disabling the FUN 00412244 function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

BDU:2025-02213

CVE-2025-0492

Affected Products

D-Link Dir-823G

References · 12

• 🔥 https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-FUN_00412244-NULL-Pointer-Dereference-1730448e619580fcb7f9d871c6e7190a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-0492 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0492 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02213 · Security Note
• https://vuldb.com/?id.291937 · Note
• https://vuldb.com/?ctiid.291937 · Note
• https://twitter.com/VulmonFeeds/status/1879671968959451288 · Twitter Post
• https://twitter.com/CveFindCom/status/1879658028984660127 · Twitter Post
• https://t.me/cvedetector/15535 · Telegram Post
• https://vuldb.com/?submit.475301 · Note
• https://twitter.com/CVEnew/status/1879657462124413182 · Twitter Post
• https://dlink.com · Note