PT-2025-39661
CVE-2025-55848
·
Publicado
2025-07-07
·
Atualizado
2026-03-09
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DIR-823 firmware version 20250416
Description
A remote code execution issue exists in the set cassword settings interface. The
http casswd parameter does not properly filter the '&' character, allowing for the injection of reverse connection commands.Recommendations
Update to a newer firmware version that addresses this issue. As a temporary workaround, restrict access to the set cassword settings interface.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾