← Database

CVE-2025-10401

MEDIUM CVSS: 6.3 Published: 2025-09-14 Modified: 2026-06-17

Description

A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulation of the argument target_addr results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected Platforms

Dlink Dir-823X FirmwareDlink Dir-823X

Weakness Type

CWE-74, CWE-77

References