CVE-2025-11100: D-Link DIR-823X set_wifi_blacklists uci_set command injection
Published Sep 28, 2025
·Updated
A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uciset of the file /goform/setwifiblacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
3 affected components
D-Link DIR-823X
All of the following
Dlink Dir-823x Firmware=250416
Dlink Dir-823x
Event History
Sep 28, 2025
CVE Published
via MITRE·06:32 AM
Data Sourced
via MITRE·06:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-11100?
CVE-2025-11100 is considered a high severity vulnerability due to the potential for remote command injection.
2
How do I fix CVE-2025-11100?
To fix CVE-2025-11100, ensure that your D-Link DIR-823X router firmware is updated to the latest version provided by D-Link.
3
Who is affected by CVE-2025-11100?
CVE-2025-11100 affects users of the D-Link DIR-823X router.
4
Can CVE-2025-11100 be exploited remotely?
Yes, CVE-2025-11100 can be exploited remotely, making it crucial to secure the affected device.
5
What kind of attack does CVE-2025-11100 enable?
CVE-2025-11100 enables remote command injection attacks on the affected device.