CVE-2025-60697

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries

High · published November 13, 2025

CVSS v3.1
7.3
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

🚨 Hold onto your router! A command injection vulnerability in the D-Link DIR-882 firmware allows unauthenticated remote attackers to execute arbitrary commands. 🔥 Think of your router as a restaurant kitchen where instructions (commands) are given. If a sneaky customer could slip in an extra ingredient that wasn't on the menu, they could make some pretty disastrous dishes! That's what's happening here - a crafty attacker can serve up whatever they want on your network just by sending a few cleverly crafted requests. An attacker can take control of your router, executing any command they desire. This could lead to unauthorized access to your network, data breaches, or even turning your router into a launch pad for further attacks. It's absolutely devastating to your home network security!

Put simply

Think of your router as a restaurant kitchen where instructions (commands) are given. If a sneaky customer could slip in an extra ingredient that wasn't on the menu, they could make some pretty disastrous dishes! That's what's happening here - a crafty attacker can serve up whatever they want on your network just by sending a few cleverly crafted requests. This vulnerability in the D-Link DIR-882 firmware allows for command injection through user-supplied DDNS parameters. The lack of proper sanitization when executing commands via the `twsystem()` function opens the door for attackers to run arbitrary commands remotely.

What to do

An attacker can take control of your router, executing any command they desire. This could lead to unauthorized access to your network, data breaches, or even turning your router into a launch pad for further attacks. It's absolutely devastating to your home network security! Immediately update your D-Link DIR-882 router firmware to version DIR882A1_FW103B01 or later to patch this vulnerability. Regularly review your router settings and disable unnecessary features to tighten security. Consider implementing a firewall to monitor and control incoming traffic more effectively. You've got this! Keep your network safe and sound by following these steps! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.03820 · 90.0th percentile
Published
2025-11-13T00:00Z
EPSS history
Timeline
  • 13 NOV 00:00Z
    A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `rc` binaries
    cvelistv5