CVE-2025-60671: Command Injection
A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823GV1.0.2B0520181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linuxvlanreinit file. The vulnerability occurs because content read from this file is only partially validated for a prefix and then formatted using vsnprintf() before being executed with system(), allowing an attacker with write access to /var/system/linuxvlanreinit to execute arbitrary commands on the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure attackers cannot write to /var/system/linux_vlan_reinit (e.g., restrict file permissions/ownership and access to trusted users/processes only), since the timelycheck and sysconf binaries use this file content to build commands executed via system().
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60671?
CVE-2025-60671 is considered a high-severity command injection vulnerability affecting D-Link DIR-823G router firmware.
How do I fix CVE-2025-60671?
To fix CVE-2025-60671, update the D-Link DIR-823G router firmware to the latest version provided by D-Link.
What products are affected by CVE-2025-60671?
CVE-2025-60671 affects the D-Link DIR-823G router with specific firmware version DIR823G_V1.0.2B05_20181207.bin.
What are the potential impacts of CVE-2025-60671?
Exploitation of CVE-2025-60671 may allow an attacker to execute arbitrary commands on the router.
How can I determine if my D-Link DIR-823G router is vulnerable to CVE-2025-60671?
Check if your router is running the affected firmware version DIR823G_V1.0.2B05_20181207.bin to determine vulnerability to CVE-2025-60671.