CVE-2025-60671
- EPSS 1.18%
- Veröffentlicht 13.11.2025 18:15:50
- Zuletzt bearbeitet 17.11.2025 19:04:41
A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linux_vlan_reinit file. The vulnerability occurs because content rea...
CVE-2025-60675
- EPSS 1.18%
- Veröffentlicht 13.11.2025 00:00:00
- Zuletzt bearbeitet 17.11.2025 19:04:49
A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /tmp/new_qos.rule configuration file. The vulnerability occurs because parsed fi...
CVE-2025-60332
- EPSS 0.28%
- Veröffentlicht 22.10.2025 00:00:00
- Zuletzt bearbeitet 24.10.2025 13:19:20
A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2025-60331
- EPSS 0.04%
- Veröffentlicht 22.10.2025 00:00:00
- Zuletzt bearbeitet 24.10.2025 13:19:38
D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-2360
- EPSS 0.23%
- Veröffentlicht 17.03.2025 04:00:06
- Zuletzt bearbeitet 15.07.2025 16:49:51
A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads...
CVE-2025-2359
- EPSS 0.35%
- Veröffentlicht 17.03.2025 03:31:06
- Zuletzt bearbeitet 15.07.2025 16:52:21
A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper auth...
CVE-2024-13030
- EPSS 0.48%
- Veröffentlicht 30.12.2024 01:15:06
- Zuletzt bearbeitet 15.07.2025 18:37:27
A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServe...
- EPSS 0.07%
- Veröffentlicht 05.11.2024 15:15:26
- Zuletzt bearbeitet 07.05.2025 14:21:36
D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
CVE-2024-51023
- EPSS 0.06%
- Veröffentlicht 05.11.2024 15:15:25
- Zuletzt bearbeitet 07.05.2025 14:23:56
D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
CVE-2024-44408
- EPSS 0.25%
- Veröffentlicht 06.09.2024 16:15:03
- Zuletzt bearbeitet 10.09.2024 17:01:55
D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords.