Vulnerability Description
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_433188` function in `prog.cgi` stores user-supplied email configuration parameters (`EmailFrom`, `EmailTo`, `SMTPServerAddress`, `SMTPServerPort`, `AccountName`) in NVRAM via `nvram_safe_set`. These values are later retrieved in the `sub_448FDC` function of `rc` using `nvram_safe_get` and concatenated into shell commands executed via `twsystem()` without sanitization. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router's web interface.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-882 Firmware | 1.02b02 |
| Dlink | Dir-882 | a1 |
Related Weaknesses (CWE)
References
- https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/1.mBroken Link
- https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVEExploitThird Party Advisory
- https://www.dlink.comProduct
- https://www.dlink.com/en/security-bulletin/Vendor Advisory
FAQ
What is CVE-2025-60701?
CVE-2025-60701 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries. The `sub_433188` function in `prog.cgi` stores user-supplied e...
How severe is CVE-2025-60701?
CVE-2025-60701 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-60701?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-882 Firmware, Dlink Dir-882.