Skip to content
OpenAdvisories

Product · D-Link

DIR-823X

31 known vulnerabilities.

18 results · Clear filters · Feed

  • Medium 4.7

    D-Link DIR-823X set_mac_clone os command injection

    A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/set_mac_clone. Such manipulation of the argument mac leads to os command injection. The attack may be performed from remote. The exploit …

  • Medium 4.7

    D-Link DIR-823X set_password os command injection

    A vulnerability was determined in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_password. This manipulation of the argument http_passwd causes os command injection. The attack is possible to be carried out remotel…

  • Medium 4.7

    D-Link DIR-823X Web Management set_ac_server os command injection

    A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/set_ac_server of the component Web Management Interface. The manipulation of the argument ac_server results in os command injection. The…

  • Medium 4.7

    D-Link DIR-823X set_ipv6 sub_424D20 os command injection

    A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file /goform/set_ipv6. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has …

  • Medium 6.3

    D-Link DIR-823X set_mode sub_41E2A0 os command injection

    A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub_41E2A0 of the file /goform/set_mode. Performing a manipulation of the argument lan_gateway results in os command injection. The attack is possible to be carried out re…

  • Medium 6.3

    D-Link DIR-823X set_wan_settings sub_415028 command injection

    A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack r…

  • Medium 6.3

    D-Link DIR-823X set_wifi_blacklists uci_set command injection

    A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uci_set of the file /goform/set_wifi_blacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available …

  • Medium 6.3

    D-Link DIR-823X delete_prohibiting uci_del command injection

    A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely.…

  • Medium 6.3

    D-Link DIR-823X set_wifi_blacklists command injection

    A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of the argument macList results in command injection. The attack may be performed from remote. The explo…

  • Medium 6.3

    D-Link DIR-823X set_device_name command injection

    A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/set_device_name. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exploit has …

  • Medium 6.3

    D-Link DIR-823X diag_traceroute command injection

    A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diag_traceroute. Executing manipulation of the argument target_addr can lead to command injection. The attack can be executed remotely. The exploit…

  • Medium 6.3

    D-Link DIR-823X delete_offline_device command injection

    A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Performing manipulation of the argument delvalue results in command injection. Remote exploitation of the attack is poss…

  • Medium 6.3

    D-Link DIR-823X set_switch_settings sub_412E7C command injection

    A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initiated remotely. The exp…

  • Medium 6.3

    D-Link DIR-823X goahead command injection

    A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remo…

  • Medium 6.3

    D-Link DIR-823X Environment Variable goahead sub_412E7C command injection

    A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/serv…

  • Medium 6.3

    D-Link DIR-823x diag_ping command injection

    A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulation of the argument target_addr results in command injection. Remote exploitation of the attack is pos…

  • Medium 4.7

    D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection

    A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument targe…

  • Medium 6.5
    CVE-2025-1103 EPSS 14%

    D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference

    A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argumen…