CVE-2025-1103
D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference
- State
- Published
- Severity
- 7.1 High
- Published
- Feb 7, 2025
- Updated
- Feb 7, 2025
- Reserved
- Feb 7, 2025
Description
A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 3.0 | 6.5 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 2.0 | 6.8 Medium | AV:N/AC:L/Au:S/C:N/I:N/A:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
DIR-823XD-Link |
|
References
- VDB-294933 | D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereferencevdb-entrytechnical-description
- VDB-294933 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #489603 | D-Link DIR-823X 240126、240802 NULL Pointer Dereferencethird-party-advisory
- https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9?pvs=73exploit
- https://www.dlink.com/product
- https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.