Vulnerability Description
A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub_415028 of the file /goform/set_static_leases. Executing manipulation of the argument Hostname can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-823X Firmware | <= 250416 |
| Dlink | Dir-823X | All versions |
Related Weaknesses (CWE)
References
- https://github.com/lin-3-start/lin-cve/blob/main/DIR-823X/D-Link%20DIR-823X%20roExploitThird Party Advisory
- https://github.com/lin-3-start/lin-cve/blob/main/DIR-823X/D-Link%20DIR-823X%20roExploitThird Party Advisory
- https://vuldb.com/?ctiid.323093Permissions RequiredVDB Entry
- https://vuldb.com/?id.323093Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.645712Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
FAQ
What is CVE-2025-10123?
CVE-2025-10123 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub_415028 of the file /goform/set_static_leases. Executing manipulation of the argument ...
How severe is CVE-2025-10123?
CVE-2025-10123 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-10123?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-823X Firmware, Dlink Dir-823X.