CVE-2025-60332

A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service (DoS) via a…

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

⚡ A single crafted HTTP request is all it takes to send D-Link DIR-823G routers into a tailspin! 🤯 Think of it like a restaurant's kitchen receiving an order without checking the menu — chaos ensues when the chefs have no clue what to prepare! 🍽️ An attacker could send a specially crafted request that causes a Denial of Service (DoS), leaving the router unresponsive and users unable to connect to the internet. This is absolutely devastating for any network relying on this router, resulting in downtime and frustration!

Put simply

Think of it like a restaurant's kitchen receiving an order without checking the menu — chaos ensues when the chefs have no clue what to prepare! 🍽️ The vulnerability arises from a NULL pointer dereference in the SetWLanRadioSettings function of the D-Link DIR-823G A1 version 1.0.2B05, allowing attackers to trigger a DoS condition with minimal effort.

What to do

An attacker could send a specially crafted request that causes a Denial of Service (DoS), leaving the router unresponsive and users unable to connect to the internet. This is absolutely devastating for any network relying on this router, resulting in downtime and frustration! To protect your network, immediately patch to the latest firmware version provided by D-Link. Consider disabling remote management features and regularly auditing your router's settings to tighten security. 🛡️ You've got this! Take these steps, and your network will be back in action in no time! 🚀

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.04952 · 92.1th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service (DoS) via a…
    cvelistv5