Improper Permission Control in D-Link DIR-823-Pro Router
CVE-2025-45729

6.3MEDIUM

Key Information:

Vendor

D-Link
Status
DIR-823-Pro
Vendor
CVE Published:
27 June 2025

What is CVE-2025-45729?

The D-Link DIR-823-Pro router version 1.02 has a security flaw related to improper permission control, which allows unauthorized users to enable Telnet services. This unauthorized access poses significant risks to network security, as it can be exploited to gain unauthorized control over the router. Users are advised to secure their devices and monitor for any unauthorized activity to mitigate the risks associated with this vulnerability.

References

https://www.kdev.site/2025/04/02/d-link-823_pro-unauthori...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.