PT-2025-39661 · D Link · Dir-823

CVE-2025-55848

·

Publicado

2025-07-07

·

Atualizado

2026-03-09

CVSS v3.1

8.8

Alta

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions DIR-823 firmware version 20250416
Description A remote code execution issue exists in the set cassword settings interface. The http casswd parameter does not properly filter the '&' character, allowing for the injection of reverse connection commands.
Recommendations Update to a newer firmware version that addresses this issue. As a temporary workaround, restrict access to the set cassword settings interface.

Exploit

Correção

RCE

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2025-12545
CVE-2025-55848

Produtos afetados

Dir-823