PT-2025-46884 · D Link · D-Link Dir-882 Router

Published 2025-11-13 · Updated 2025-11-14 · CVE-2025-60701

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 Router firmware versions prior to DIR882A1 FW102B02

Description A command injection issue exists in the D-Link DIR-882 Router firmware. The sub 433188 function within the prog.cgi binary stores user-provided email configuration parameters – EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, and AccountName – in NVRAM using nvram safe set. Subsequently, the sub 448FDC function in the rc binary retrieves these values using nvram safe get and incorporates them into shell commands executed via twsystem() without proper sanitization. An unauthenticated remote attacker can leverage this to execute arbitrary commands on the device by sending crafted HTTP requests to the router’s web interface.

Recommendations Update the D-Link DIR-882 Router firmware to version DIR882A1 FW102B02 or later.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-14840

CVE-2025-60701

Affected Products

D-Link Dir-882 Router

References · 9

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60701.md · Exploit
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60701 · Security Note
• https://osv.dev/vulnerability/CVE-2025-60701 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14840 · Security Note
• https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/1.md · Note
• https://t.me/CVEtracker/37276 · Telegram Post
• https://twitter.com/CVEnew/status/1989194846545014880 · Twitter Post
• https://dlink.com · Note