PT-2025-49423 · D Link · Dir-823

Panda_0X1 · Published 2025-12-08 · Updated 2026-03-09 · CVE-2025-14208

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions up to 20250416

Description A security flaw exists in D-Link DIR-823X up to version 20250416. The issue resides in the sub 415028 function within the /goform/set wan settings file. Manipulation of the ppp username argument can lead to command injection. This allows for remote exploitation. The exploit has been publicly released.

Recommendations Versions up to 20250416 should be updated. As a temporary workaround, restrict access to the /goform/set wan settings file. Avoid using the ppp username parameter until the issue is resolved.

Exploit

Fix

Special Elements Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-77

Related Identifiers

CVE-2025-14208

Affected Products

Dir-823

References · 11

• 🔥 https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.md#poc · Exploit
• 🔥 https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14208 · Security Note
• https://t.me/cveNotify/154809 · Telegram Post
• https://t.me/cveNotify/145046 · Telegram Post
• https://vuldb.com/?id.334651 · Note
• https://vuldb.com/?submit.700499 · Note
• https://twitter.com/dailycve/status/2031069145517666373 · Twitter Post
• https://vuldb.com/?ctiid.334651 · Note
• https://twitter.com/CVEnew/status/1997863691593584875 · Twitter Post
• https://dlink.com · Note