dir-823x_firmware vulnerabilities
CVEs whose affected-version data names the dir-823x_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
10 CVEsRSS
CVE-2025-14208Medium· 6.3A security flaw has been discovered in D-Link DIR-823X up to 20250416
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible …
CVE-2025-11100Medium· 6.3A vulnerability was identified in D-Link DIR-823X 250416
A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uci_set of the file /goform/set_wifi_blacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit …
CVE-2025-11099Medium· 6.3A vulnerability was determined in D-Link DIR-823X 250416
A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiat…
CVE-2025-11097Medium· 6.3A vulnerability has been found in D-Link DIR-823X 250416
A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/set_device_name. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remo…
CVE-2025-11096Medium· 6.3A flaw has been found in D-Link DIR-823X 250416
A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diag_traceroute. Executing manipulation of the argument target_addr can lead to command injection. The attack can be executed…
CVE-2025-11092Medium· 6.3A weakness has been identified in D-Link DIR-823X 250416
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initi…
CVE-2025-11098Medium· 6.3A vulnerability was found in D-Link DIR-823X 250416
A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of the argument macList results in command injection. The attack may be performed …
CVE-2025-11095Medium· 6.3A vulnerability was detected in D-Link DIR-823X 250416
A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Performing manipulation of the argument delvalue results in command injection. Remote exploitation…
CVE-2025-10814Medium· 6.3A vulnerability was determined in D-Link DIR-823X 240126/240802/250416
A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack…
CVE-2025-10634Medium· 6.3A weakness has been identified in D-Link DIR-823X 240126/240802/250416
A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument termin…