CVE-2025-11097: D-Link DIR-823X set_device_name command injection

Published Sep 28, 2025

Updated

A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/setdevicename. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Affected Software

3 affected components

D-Link DIR-823X=250416

All of the following

Dlink Dir-823x Firmware=250416

Dlink Dir-823x

Event History

Sep 28, 2025

CVE Published

via MITRE·05:02 AM

Data Sourced

via MITRE·05:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Mar 4, 57724

Event

via NVD·01:34 PM

Frequently Asked Questions

What is the severity of CVE-2025-11097?

CVE-2025-11097 has a high severity rating due to its potential for remote command injection.

How does CVE-2025-11097 affect D-Link DIR-823X?

CVE-2025-11097 affects the device by allowing attackers to exploit the '/goform/set_device_name' function, leading to command injection.

Can CVE-2025-11097 be exploited remotely?

Yes, CVE-2025-11097 can be exploited remotely, making the vulnerability particularly dangerous.

What steps should I take to mitigate CVE-2025-11097?

To mitigate CVE-2025-11097, it's recommended to update your D-Link DIR-823X to the latest firmware version provided by D-Link.

Is there a known fix available for CVE-2025-11097?

Yes, a fix for CVE-2025-11097 is typically included in firmware updates from D-Link.