cve-2025-14208

LOW CVSS 2.1 nvd

Description

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

Timeline

Published: 2025-12-08
Last Modified: 2026-10-14

CVSS Details

Attack Vector: NETWORK
Attack Complexity: LOW
Privileges Required: LOW

Affected Products

dlink dir-823x_firmware
dlink dir-823x

Weaknesses (CWE)

CWE-74 CWE-77

CVSS metrics

Version	Base	Severity	Vector	Exploitability	Impact	Source
4.0	2.1	LOW	`CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`			cna@vuldb.com
3.1	6.3	MEDIUM	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L`	2.8	3.4	cna@vuldb.com
2.0	6.5	MEDIUM	`AV:N/AC:L/Au:S/C:P/I:P/A:P`	8.0	6.4	cna@vuldb.com

CPE configurations

CPE	Version range	Vulnerable
`cpe:2.3:o:dlink:dir-823x_firmware:-:::::::*`	—	yes

CPE	Version range	Vulnerable
`cpe:2.3:h:dlink:dir-823x:-:::::::*`	—	no

NVD metadata

NVD status: Analyzed
Source identifier: cna@vuldb.com

References

https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.md Exploit, Third Party Advisory
https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.md#poc Exploit
https://vuldb.com/?ctiid.334651 Permissions Required, VDB Entry
https://vuldb.com/?id.334651 Third Party Advisory, VDB Entry
https://vuldb.com/?submit.700499 Third Party Advisory, VDB Entry
https://www.dlink.com/ Product

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 2.1,
  "datePublished": "2025-12-08T01:16:00.673",
  "dateUpdated": "2026-10-14T22:10:00.210",
  "description": "A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.",
  "id": "CVE-2025-14208",
  "raw": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "DIR-823X",
            "vendor": "D-Link",
            "versions": [
              {
                "status": "affected",
                "version": "20250416"
              }
            ]
          }
        ],
        "source": "cna@vuldb.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:dlink:dir-823x_firmware:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A4E22BD0-C05B-4B5B-BCA6-B48D0B500598",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "09CE2627-49F3-4B6F-B48B-F52665C6B8C6",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited."
      },
      {
        "lang": "es",
        "value": "Se ha descubierto una falla de seguridad en D-Link DIR-823X hasta el 20250416. Esto afecta a la función sub_415028 del archivo /goform/set_wan_settings. La manipulación del argumento ppp_username resulta en inyección de comandos. Es posible lanzar el ataque remotamente. El exploit ha sido publicado y puede ser explotado."
      }
    ],
    "id": "CVE-2025-14208",
    "lastModified": "2026-10-14T22:10:00.210",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "MEDIUM",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "cna@vuldb.com",
          "type": "Secondary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 3.4,
          "source": "cna@vuldb.com",
          "type": "Secondary"
        }
      ],
      "cvssMetricV40": [
        {
          "cvssData": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 2.1,
            "baseSeverity": "LOW",
            "confidentialityRequirement": "NOT_DEFINED",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "NOT_DEFINED",
            "modifiedAttackRequirements": "NOT_DEFINED",
            "modifiedAttackVector": "NOT_DEFINED",
            "modifiedPrivilegesRequired": "NOT_DEFINED",
            "modifiedSubAvailabilityImpact": "NOT_DEFINED",
            "modifiedSubConfidentialityImpact": "NOT_DEFINED",
            "modifiedSubIntegrityImpact": "NOT_DEFINED",
            "modifiedUserInteraction": "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
            "modifiedVulnIntegrityImpact": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "source": "cna@vuldb.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-14208",
            "options": [
              {
                "exploitation": "poc"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-08T15:52:30.842324Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-08T01:16:00.673",
    "references": [
      {
        "source": "cna@vuldb.com",
        "tags": [
          "Exploit",
          "Third Party Advisory"
        ],
        "url": "https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.md"
      },
      {
        "source": "cna@vuldb.com",
        "tags": [
          "Exploit"
        ],
        "url": "https://github.com/panda666-888/vuls/blob/main/d-link/dir-823x/set_wan_settings.md#poc"
      },
      {
        "source": "cna@vuldb.com",
        "tags": [
          "Permissions Required",
          "VDB Entry"
        ],
        "url": "https://vuldb.com/?ctiid.334651"
      },
      {
        "source": "cna@vuldb.com",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://vuldb.com/?id.334651"
      },
      {
        "source": "cna@vuldb.com",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://vuldb.com/?submit.700499"
      },
      {
        "source": "cna@vuldb.com",
        "tags": [
          "Product"
        ],
        "url": "https://www.dlink.com/"
      }
    ],
    "sourceIdentifier": "cna@vuldb.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-74"
          },
          {
            "lang": "en",
            "value": "CWE-77"
          }
        ],
        "source": "cna@vuldb.com",
        "type": "Secondary"
      }
    ]
  },
  "severity": "LOW",
  "source": "nvd",
  "title": "A security flaw has been discovered in D-Link DIR-823X up to 20250416"
}

View JSON API Download JSON

cve-2025-14208

Raw JSON Data