CVE-2025-14208: D-Link DIR-823X set_wan_settings sub_415028 command injection
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14208?
CVE-2025-14208 is considered a critical vulnerability due to the potential for remote command injection.
How do I fix CVE-2025-14208?
To fix CVE-2025-14208, update your D-Link DIR-823X firmware to a version later than 20250416.
Who is affected by CVE-2025-14208?
CVE-2025-14208 affects users of the D-Link DIR-823X router running firmware versions up to 20250416.
Can CVE-2025-14208 be exploited remotely?
Yes, CVE-2025-14208 can be exploited remotely, making it a significant security risk.
What type of vulnerability is CVE-2025-14208?
CVE-2025-14208 is a command injection vulnerability stemming from improper handling of user input.