Vulnerability Description
A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-823X Firmware | 240126 |
| Dlink | Dir-823X | - |
Related Weaknesses (CWE)
References
- https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-VulnerExploitThird Party Advisory
- https://vuldb.com/?ctiid.294933Permissions RequiredThird Party AdvisoryVDB Entry
- https://vuldb.com/?id.294933Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.489603Third Party Advisory
- https://www.dlink.com/Product
- https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-VulnerExploitThird Party Advisory
FAQ
What is CVE-2025-1103?
CVE-2025-1103 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component...
How severe is CVE-2025-1103?
CVE-2025-1103 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-1103?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-823X Firmware, Dlink Dir-823X.