CVE-2025-29041

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-823x_firmware:240802:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*

History

01 May 2025, 18:15

Type Values Removed Values Added
Summary An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c

25 Apr 2025, 18:28

Type Values Removed Values Added
First Time Dlink dir-823x Firmware
Dlink dir-823x
CPE cpe:2.3:h:dlink:dir-832x:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-832x_firmware:240802:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-823x_firmware:240802:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-823x:-:*:*:*:*:*:*:*

21 Apr 2025, 18:40

Type Values Removed Values Added
CPE cpe:2.3:h:dlink:dir-832x:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-832x_firmware:240802:*:*:*:*:*:*:*
First Time Dlink dir-832x
Dlink
Dlink dir-832x Firmware
References () https://www.dlink.com/en/security-bulletin/ - () https://www.dlink.com/en/security-bulletin/ - Vendor Advisory
References () https://gist.github.com/xyqer1/101b7308bdf8618d8be30bd1d09ddd38 - () https://gist.github.com/xyqer1/101b7308bdf8618d8be30bd1d09ddd38 - Exploit, Third Party Advisory
References () https://github.com/xyqer1/Dlink-dir-823x-diag_nslookup-target_addr-CommandInjection - () https://github.com/xyqer1/Dlink-dir-823x-diag_nslookup-target_addr-CommandInjection - Exploit, Third Party Advisory

17 Apr 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-17 15:15

Updated : 2025-05-01 18:15


NVD link : CVE-2025-29041

Mitre link : CVE-2025-29041


JSON object : View

Products Affected

dlink

  • dir-823x_firmware
  • dir-823x
CWE

No CWE.