CVE-2025-2360mediumCWE-266CWE-285

CVE-2025-2360: falha de média gravidade em D-Link DIR-823G

D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization

Publicada em

Seguir esta CVE+ Monitorar DIR-823G

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 4.2%
A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
D-Link · DIR-823G
CVEs relacionadas — D-Link DIR-823G

No mesmo produto, das mais perigosas para as menos.

CVE-2025-2359MEDIUMD-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorizationEPSS 15.4%CVE-2024-13030MEDIUMD-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access controlEPSS 2.0%CVE-2026-90680CRITICALD-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowEPSS 0.9%CVE-2026-4193MEDIUMD-Link DIR-823G goahead UpdateClientInfo access controlEPSS 0.8%CVE-2026-11492MEDIUMD-Link DIR-823G vsftpd vsftpd.conf least privilege violationEPSS 0.5%