PT-2025-46883 · D Link · D-Link Dir-882 Router

Published 2025-11-13 · Updated 2025-11-14 · CVE-2025-60700

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 Router firmware versions prior to DIR882A1 FW102B02

Description A command injection issue exists in the D-Link DIR-882 Router firmware. The sub 4455BC function within the prog.cgi binary stores user-supplied SetDMZSettings/IPAddress values in NVRAM using nvram safe set("dmz ipaddr", ...). These values are later retrieved in the DMZ run function of librcm.so using nvram safe get and incorporated into iptables shell commands executed via twsystem() without proper sanitization. An unauthenticated remote attacker can exploit this to execute arbitrary commands on the device by sending specially crafted HTTP requests to the router's web interface. The vulnerable binaries include prog.cgi and librcm.so.

Recommendations Update the D-Link DIR-882 Router firmware to version DIR882A1 FW102B02 or later.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-14843

CVE-2025-60700

Affected Products

D-Link Dir-882 Router

References · 9

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60700.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60700 · Security Note
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-60700 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14843 · Security Note
• https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/3.md · Note
• https://t.me/CVEtracker/37275 · Telegram Post
• https://twitter.com/CVEnew/status/1989194845546746336 · Twitter Post
• https://dlink.com · Note