D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23368)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability, which originates from the incorrect operation of the function ucidel on the parameter delvalue in the file /goform/deleteprohibiting, which can be exploited by an...

PT-2025-39761

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in the D-Link DIR-823X router. Specifically, manipulating the delvalue argument within the uci del function in the /goform/delete prohibiting file can lead to command injection. This...

PT-2025-39757

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A command injection issue exists in D-Link DIR-823X version 250416. The issue is located in the file /goform/delete offline device. Manipulation of the delvalue argument can lead to command injection...