CVE-2025-10634: D-Link DIR-823X Environment Variable goahead sub_412E7C command injection
A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminaladdr/serverip/serverport causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10634?
The severity of CVE-2025-10634 has been classified as high due to the potential for remote code execution.
How do I fix CVE-2025-10634?
To fix CVE-2025-10634, update your D-Link DIR-823X firmware to the latest version that addresses this vulnerability.
What components are affected by CVE-2025-10634?
CVE-2025-10634 affects the Environment Variable Handler function in the D-Link DIR-823X router.
What is the impact of exploiting CVE-2025-10634?
Exploiting CVE-2025-10634 can lead to unauthorized command execution on the affected D-Link DIR-823X devices.
Which versions of D-Link DIR-823X are vulnerable to CVE-2025-10634?
D-Link DIR-823X versions from 240126 to 250416 are vulnerable to CVE-2025-10634.