CVE-2025-1103: D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference
First published: Fri Feb 07 2025(Updated: )
A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router | >=240126<=240802 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.294933
- https://vuldb.com/?ctiid.294933
- https://vuldb.com/?submit.489603
- https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9?pvs=73
- https://www.dlink.com/
- https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9
Frequently Asked Questions
What is the severity of CVE-2025-1103?
CVE-2025-1103 is classified as a problematic vulnerability affecting the D-Link DIR-823X router.
What components are affected by CVE-2025-1103?
CVE-2025-1103 impacts the set_wifi_blacklists function in the HTTP POST Request Handler of the D-Link DIR-823X router.
How do I fix CVE-2025-1103?
To fix CVE-2025-1103, update the D-Link DIR-823X router to the latest firmware version provided by the vendor.
What type of attack could exploit CVE-2025-1103?
CVE-2025-1103 could potentially be exploited through crafted HTTP POST requests targeting the macList argument.
Do I need to be concerned about CVE-2025-1103?
Yes, CVE-2025-1103 poses a risk to the security of your network and should be addressed promptly.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/source
- agent/tags
- agent/event
- vendor/d-link
- canonical/d-link dir-823x ax3000 dual-band gigabit wireless router