The vulnerability of the set_cassword() function in D-Link DIR-823X router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setcassword function in D-Link DIR-823X router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the httpcasswd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

D-Link DIR-823X Command Execution Vulnerability

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command execution vulnerability that can be exploited by an attacker to cause code execution due to the setcassword settings interface not filtering special characters in the httpcasswd parameter...

CVE-2025-55848: Improper Neutralization of Special Elements used in a Command

An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the setcassword settings interface, as the httpcasswd parameter is not filtered by '&'to allow injection of reverse connection commands...