A vulnerability has been found in D-Link DIR-823X 240126/240802 and classified as critical. Affected by this vulnerability is the function FUN_00412244. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-FUN_00412244-NULL-Pointer-Dereference-1730448e619580fcb7f9d871c6e7190a | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.291937 | Permissions Required VDB Entry |
| https://vuldb.com/?id.291937 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.475301 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
24 Sep 2025, 18:41
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink dir-823x Firmware
Dlink Dlink dir-823x |
|
| Summary |
|
|
| CPE | cpe:2.3:o:dlink:dir-823x_firmware:240126:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-823x:*:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-823x_firmware:240802:*:*:*:*:*:*:* |
|
| References | () https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-FUN_00412244-NULL-Pointer-Dereference-1730448e619580fcb7f9d871c6e7190a - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.291937 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.291937 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.475301 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product |
15 Jan 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-15 22:15
Updated : 2025-09-24 18:41
NVD link : CVE-2025-0492
Mitre link : CVE-2025-0492
CVE.ORG link : CVE-2025-0492
JSON object : View
Products Affected
dlink
- dir-823x
- dir-823x_firmware