CVE-2025-11092

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416

Description A flaw exists in the D-Link DIR-823X, specifically within the sub 412E7C function located in the /goform/set switch settings file. Manipulation of the port argument can lead to command injection. This issue can be exploited remotely. The exploit is publicly available.

Recommendations Apply updates to address the flaw in the sub 412E7C function of the /goform/set switch settings file. As a temporary workaround, restrict access to the /goform/set switch settings file to minimize the risk of exploitation. Avoid using the port parameter in the affected function until the issue is resolved.