CVE-2025-14208: D-Link DIR-823X Firmware

Medium severity, CVSS 6.3. EPSS: 3.4% chance of exploitation in the next 30 days.

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

Affected products

• D-Link DIR-823X Firmware: affected versions not specified

Published 2025-12-08. Last modified 2026-06-17.