CVE-2022-28573

CVE-2022-28573 concerns D-Link DIR-823-Pro firmware v1.0.2 where the vulnerable function is SetNTPserverSeting(). The issue allows an attacker to trigger a command injection via the system_time_timezone parameter, enabling arbitrary command execution. Multiple connected sources (NVD, Red Hat, CVE...

CVE-2021-46453

D-Link DIR-823-Pro v1.0.2 is affected by a command-injection vulnerability in SetStaticRouteSettings, allowing an attacker to execute arbitrary commands via the staticroute_list parameter. Affected component: the router’s SetStaticRouteSettings function; vulnerability type: command injection. Imp...

CVE-2021-46456

CVE-2021-46456 affects D-Link DIR-823-Pro v1.0.2. The vulnerability is a command injection in the function SetWLanACLSettings, exploitable via the wl(0).(0)_maclist parameter, allowing an attacker on the network to execute arbitrary commands. CVSS data in the initial entry indicate a network atta...

CVE-2021-46457

The CVE-2021-46457 entry relates to D-Link DIR-823-Pro (v1.0.2). A command-injection vulnerability exists in the function ChgSambaUserSettings, allowing an attacker to execute arbitrary commands via the samba_name parameter. Connected sources (CNVD/CNNVD and CVE records) confirm the affected devi...

CVE-2021-46454

Summary (CVE-2021-46454): D-Link DIR-823-Pro v1.0.2 contains a command-injection vulnerability in the SetWLanApcliSettings function, allowing attackers to execute arbitrary commands via the ApCliKeyStr parameter. Multiple sources (CNVD/CNNVD/NVD entries) corroborate a network-exposed issue with t...

CVE-2021-46455

The CVE-2021-46455 entry concerns a vulnerability in D-Link DIR-823-Pro, affected firmware v1.0.2. The issue is a command injection in the SetStationSettings function, exploitable via the station_access_enable parameter. This can allow an attacker to execute arbitrary commands with network access...

CVE-2021-46452

CVE-2021-46452 affects D-Link DIR-823-Pro v1.0.2. A command-injection vulnerability exists in the SetNetworkTomographySettings function, enabling an attacker to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and t...

CVE-2025-45729

The CVE-2025-45729 entry affects D-Link DIR-823-Pro hardware (version 1.02) and is caused by improper permission control that allows unauthorized users to turn on and access Telnet services. The documented impact is low for confidentiality, integrity, and availability, with network access as the ...