Security Advisory

CVE-2025-2717

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-03-24 23:31:05

Last updated 2025-03-25 13:29:34

Assigner VulDB

CVSS score 5.1

State PUBLISHED

Description

A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗