CVE-2025-10814: D-Link DIR-823X goahead command injection
A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10814?
CVE-2025-10814 has been classified as a high severity vulnerability due to the potential for remote command injection.
How does CVE-2025-10814 affect D-Link DIR-823X devices?
CVE-2025-10814 affects the D-Link DIR-823X by allowing attackers to perform command injection through the manipulation of the argument port.
Can CVE-2025-10814 be exploited remotely?
Yes, CVE-2025-10814 can be exploited remotely, making it particularly dangerous for users of affected D-Link DIR-823X devices.
How can I fix CVE-2025-10814?
To fix CVE-2025-10814, you should update your D-Link DIR-823X to the latest firmware version that addresses this vulnerability.
Which versions of D-Link DIR-823X are affected by CVE-2025-10814?
CVE-2025-10814 affects D-Link DIR-823X versions between 240126 and 250416 inclusive.