CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2025-03-25
D-Link DIR-823X Router Remote Command Injection Vulnerability (CVE-2025-29635) Security Advisory
[Affected Scope] D-Link DIR-823X router firmware versions 240126 and 240802.
[Impact] An authorized attacker can execute arbitrary system commands with root privileges and fully compromise the device by sending a crafted HTTP POST request to the `/goform/set_prohibiting` endpoint.
[Mitigation] Apply the official firmware patch immediately, disable remote WAN management, and enforce strong administrator credentials.