Skip to content
OpenAdvisories
Medium WID-SEC-2025-2145 6 CVEs

D-LINK Router: Mehrere Schwachstellen ermöglichen Codeausführung

Published Sep 28, 2025 · Updated Sep 28, 2025 · de-DE

Vendor: D-Link Product: Router

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode auszuführen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 6

  • Medium 6.3
    CVE-2025-11092

    D-Link DIR-823X set_switch_settings sub_412E7C command injection

    A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initiated remotely. The exp…

    D-Link DIR-823X Network devices
  • Medium 6.3
    CVE-2025-11095

    D-Link DIR-823X delete_offline_device command injection

    A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Performing manipulation of the argument delvalue results in command injection. Remote exploitation of the attack is poss…

    D-Link DIR-823X Network devices
  • Medium 6.3
    CVE-2025-11097

    D-Link DIR-823X set_device_name command injection

    A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/set_device_name. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exploit has …

    D-Link DIR-823X Network devices
  • Medium 6.3
    CVE-2025-11098

    D-Link DIR-823X set_wifi_blacklists command injection

    A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of the argument macList results in command injection. The attack may be performed from remote. The explo…

    D-Link DIR-823X Network devices
  • Medium 6.3
    CVE-2025-11099

    D-Link DIR-823X delete_prohibiting uci_del command injection

    A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely.…

    D-Link DIR-823X Network devices
  • Medium 6.3
    CVE-2025-11100

    D-Link DIR-823X set_wifi_blacklists uci_set command injection

    A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uci_set of the file /goform/set_wifi_blacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available …

    D-Link DIR-823X Network devices

Revision history

  1. #1

    Initiale Fassung

References