CVE-2025-60331

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow lurks in the D-Link DIR-823G, and it can spell trouble for your network! 🤯 Think of it like a traffic jam caused by a rogue delivery truck blocking the intersection. Just one misdirected request can tie up the entire system, leading to a Denial of Service that prevents legitimate users from getting through. If exploited, an attacker could crash your router, leaving your network in a state of chaos with no access! This can be absolutely devastating for both personal and business environments, as it cuts off connectivity and disrupts daily operations.

Put simply

Think of it like a traffic jam caused by a rogue delivery truck blocking the intersection. Just one misdirected request can tie up the entire system, leading to a Denial of Service that prevents legitimate users from getting through. This vulnerability exists due to a buffer overflow in the FillMacCloneMac parameter at the /EXCU_SHELL endpoint, allowing attackers to send crafted input that overloads the system.

What to do

If exploited, an attacker could crash your router, leaving your network in a state of chaos with no access! This can be absolutely devastating for both personal and business environments, as it cuts off connectivity and disrupts daily operations. To protect yourself, update the firmware of your D-Link DIR-823G to the latest version immediately. Additionally, consider configuring firewall rules to limit access to the /EXCU_SHELL endpoint and monitor for any suspicious activity. You've got this! Taking these steps will help you secure your network and maintain smooth operations. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00622 · 48.9th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint
    cvelistv5