Orta CVSS 5.4 PoC var
CVE-2025-60671: Dir-823g Firmware: komut enjeksiyonu
Açıklama (NVD)
A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linux_vlan_reinit file. The vulnerability occurs because content read from this file is only partially validated for a prefix and then formatted using vsnprintf() before being executed with system(), allowing an attacker with write access to /var/system/linux_vlan_reinit to execute arbitrary commands on the device.
Özet bilgiler
- Ürün
- Dlink Dir-823g Firmware
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - EPSS
- %1,43 (yüzdelik 73)
- CWE
- CWE-77
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| dlink-dir-823g-firmware | 1.0.2b05_20181207 | 1.0.2b05_20181207 | — |