CVE-2025-11092: D-Link DIR-823X set_switch_settings sub_412E7C command injection

Published Sep 28, 2025

Updated

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setswitchsettings. This manipulation of the argument port causes command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Affected Software

3 affected components

D-Link DIR-823X

All of the following

Dlink Dir-823x Firmware=250416

Dlink Dir-823x

Event History

Sep 28, 2025

CVE Published

via MITRE·02:02 AM

Data Sourced

via MITRE·02:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11092?

CVE-2025-11092 is considered a medium severity vulnerability due to the potential for remote command injection.

How do I fix CVE-2025-11092?

To fix CVE-2025-11092, update the D-Link DIR-823X firmware to the latest available version provided by D-Link.

What types of attacks can exploit CVE-2025-11092?

CVE-2025-11092 can be exploited to perform remote command injection attacks against the D-Link DIR-823X router.

What version of D-Link DIR-823X is affected by CVE-2025-11092?

All versions of the D-Link DIR-823X router prior to the latest firmware release are affected by CVE-2025-11092.

Is there a known workaround for CVE-2025-11092?

Currently, there is no known workaround for CVE-2025-11092 other than applying the firmware update to mitigate the vulnerability.