Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in D-LINK Routern ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Product
Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.
Vulnerabilities 2
-
High 7.3CVE-2025-2359 EPSS 15%
D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization
A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authorization…
-
High 7.3
D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization
A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads to impro…
Revision history
-
#1
Initiale Fassung
References
-
NIST Vulnerability Databse vom 2025-03-16
https://nvd.nist.gov/vuln/detail/CVE-2025-2360
-
NIST Vulnerability Databse vom 2025-03-16
https://nvd.nist.gov/vuln/detail/CVE-2025-2359
-
PoC vom 2025-03-16
https://lavender-bicycle-a5a.notion.site/D-Link-DIR-823G-SetUpnpSettings-1ac53a41781f80d1a290c8d5da3e795e
-
D-Link Offizielle Ankündigung vom 2025-01-06
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10410