Vulnerability Description
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_4438A4` function in `prog.cgi` stores user-supplied DDNS parameters (`ServerAddress` and `Hostname`) in NVRAM via `nvram_safe_set`. These values are later retrieved in the `start_DDNS_ipv4` function of `rc` using `nvram_safe_get` and concatenated into DDNS shell commands executed via `twsystem()` without proper sanitization. Partial string comparison is performed but is insufficient to prevent command injection. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router's web interface.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-882 Firmware | 1.02b02 |
| Dlink | Dir-882 | a1 |
Related Weaknesses (CWE)
References
- https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/4.mBroken Link
- https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVEExploitThird Party Advisory
- https://www.dlink.com/Product
- https://www.dlink.com/en/security-bulletin/Vendor Advisory
FAQ
What is CVE-2025-60697?
CVE-2025-60697 is a vulnerability with a CVSS score of 7.3 (HIGH). A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_4438A4` function in `prog.cgi` stores user-supplied D...
How severe is CVE-2025-60697?
CVE-2025-60697 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-60697?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-882 Firmware, Dlink Dir-882.