Dlink

Dir-823x Firmware

22 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-10401

Exploit
  • EPSS 0.09%
  • Published 14.09.2025 15:32:06
  • Last modified 24.09.2025 18:41:54

A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulation of the argument target_addr results in command injection. Remote exploitation of the atta...

9.8

CVE-2025-10123

Exploit
  • EPSS 0.34%
  • Published 09.09.2025 02:32:10
  • Last modified 24.09.2025 18:43:47

A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub_415028 of the file /goform/set_static_leases. Executing manipulation of the argument Hostname can lead to command injection. The attack...

7.2

CVE-2025-29039

Exploit
  • EPSS 0.5%
  • Published 17.04.2025 00:00:00
  • Last modified 25.04.2025 18:28:39

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x41dda8

9.8

CVE-2025-29043

Exploit
  • EPSS 1.25%
  • Published 17.04.2025 00:00:00
  • Last modified 25.04.2025 18:32:43

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234

9.8

CVE-2025-29042

Exploit
  • EPSS 1.25%
  • Published 17.04.2025 00:00:00
  • Last modified 25.04.2025 18:32:08

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c

9.8

CVE-2025-29041

Exploit
  • EPSS 1.25%
  • Published 17.04.2025 00:00:00
  • Last modified 01.05.2025 18:15:54

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c

9.8

CVE-2025-29040

Exploit
  • EPSS 1.25%
  • Published 17.04.2025 00:00:00
  • Last modified 01.05.2025 18:15:54

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41737c

8.8

CVE-2025-29635

Exploit
  • EPSS 0.74%
  • Published 25.03.2025 00:00:00
  • Last modified 03.04.2025 17:35:51

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remot...

7.2

CVE-2025-2717

  • EPSS 0.04%
  • Published 24.03.2025 23:31:05
  • Last modified 21.05.2025 16:51:45

A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argum...

6.5

CVE-2025-1103

Exploit
  • EPSS 0.51%
  • Published 07.02.2025 15:15:17
  • Last modified 21.05.2025 16:51:34

A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of th...