D-Link DIR-823x firmware 240802
Approved changes feed: RSS · Atom
cpe:2.3:o:dlink:dir-823x_firmware:240802:*:*:*:*:*:*:*
part: o version: 240802 update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dir 823X Firmware (da6edc02-3bfb-51b7-858e-149a4191ad23) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2717 |
vulnerable | 2026-06-08 07:16:58.130405 |
D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-24T23:31:05.104Z
Updated: 2025-03-25T13:29:34.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29635 |
vulnerable | 2026-06-08 07:14:56.525447 |
Details available
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.
Published: 2025-03-25T00:00:00.000Z
Updated: 2026-04-25T03:55:37.481Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29043 |
vulnerable | 2026-06-08 07:14:56.319468 |
Details available
An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234
Published: 2025-04-17T00:00:00.000Z
Updated: 2025-04-18T15:13:23.082Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29042 |
vulnerable | 2026-06-08 07:14:56.318962 |
Details available
An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c
Published: 2025-04-17T00:00:00.000Z
Updated: 2025-04-18T15:12:00.708Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29041 |
vulnerable | 2026-06-08 07:14:56.318482 |
Details available
An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c
Published: 2025-04-17T00:00:00.000Z
Updated: 2025-05-01T18:08:19.391Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29040 |
vulnerable | 2026-06-08 07:14:56.318174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29039 |
vulnerable | 2026-06-08 07:14:56.317082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1103 |
vulnerable | 2026-06-08 07:06:36.920639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10814 |
vulnerable | 2026-06-08 07:02:27.553154 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10634 |
vulnerable | 2026-06-08 07:02:27.243862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0492 |
vulnerable | 2026-06-08 07:02:24.708792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.