Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🟠 D-Link DIR-823X, Command Injection, #CVE-2025-14208 (Medium) https://dailycve.com/d-link-dir-823x-command-injection-cve-2025-14208-medium/
Post summary
The post announces a medium‑severity command‑injection vulnerability (CVE‑2025‑14208) affecting D‑Link DIR‑823X, but does not provide any PoC, exploit code, patch, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-823x | - | - | - |
| OS | dlink | dir-823x_firmware | - | - | - |