Command Injection Vulnerability in D-Link DIR-823X Router

CVE-2025-10634

What is CVE-2025-10634?

A command injection vulnerability has been discovered in the D-Link DIR-823X series routers due to an unsafe handling of environment variables in the /usr/sbin/goahead component, particularly within the sub_412E7C function. This flaw allows an attacker to manipulate arguments such as terminal_addr, server_ip, and server_port, enabling them to execute arbitrary commands on the affected devices remotely. The risk is heightened by the public availability of proof-of-concept exploits, making it imperative for users to apply security patches to safeguard their systems.

References