CVE-2025-10634CWE-74CWE-77command-injection

CVE-2025-10634

Medium · published September 18, 2025

CVSS v3.1
6.3
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/server_port causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.07359 · 94.4th percentile
Weaknesses
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'); CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2025-09-18T06:15Z
Affected products (3)
ProductVersionsFixed in
dlink/dir-823x_firmwareall versions—
dlink/dir-823x_firmwareall versions—
dlink/dir-823x_firmwareall versions—
References (7)
https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.md · [email protected]https://pan.baidu.com/s/1dWnXEa58P0KHw53L9U_PoQ · [email protected]https://vuldb.com/?ctiid.324662 · [email protected]https://vuldb.com/?id.324662 · [email protected]https://vuldb.com/?submit.650792 · [email protected]https://www.dlink.com/ · [email protected]https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.md · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 18 SEP 01:02Z
    D-Link DIR-823X Environment Variable goahead sub_412E7C command injection
    cvelistv5