Details of VAR-202503-0596

ID

VAR-202503-0596

CVE

CVE-2025-2359

TITLE

D-Link DIR-823G Authorization Issue Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2025-13069

DESCRIPTION

A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. D-Link DIR-823G is a wireless router from D-Link, a Chinese company. No detailed vulnerability details are provided at present

Trust: 1.44

sources: NVD: CVE-2025-2359 // CNVD: CNVD-2025-13069

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-13069

AFFECTED PRODUCTS

vendor:

d link

model:

dir-823g 1.0.2b05 20181207

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2025-13069

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com:	CVE-2025-2359
value:	MEDIUM
Trust: 1.0
CNVD:	CNVD-2025-13069
value:	HIGH
Trust: 0.6

cna@vuldb.com:	CVE-2025-2359
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
CNVD:	CNVD-2025-13069
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

cna@vuldb.com:	CVE-2025-2359
baseSeverity:	HIGH
baseScore:	7.3
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	3.4
version:	3.1
Trust: 1.0

sources: CNVD: CNVD-2025-13069 // NVD: CVE-2025-2359

PROBLEMTYPE DATA

problemtype:	CWE-266	Trust: 1.0
problemtype:	CWE-285	Trust: 1.0

sources: NVD: CVE-2025-2359

EXTERNAL IDS

db:	NVD	id:	CVE-2025-2359	Trust: 1.6
db:	VULDB	id:	299826	Trust: 1.0
db:	CNVD	id:	CNVD-2025-13069	Trust: 0.6

sources: CNVD: CNVD-2025-13069 // NVD: CVE-2025-2359

REFERENCES

url:	https://lavender-bicycle-a5a.notion.site/d-link-dir-823g-setddnssettings-1ac53a41781f80d98649dd3cbe106e9b?pvs=4	Trust: 1.6
url:	https://vuldb.com/?id.299826	Trust: 1.0
url:	https://www.dlink.com/	Trust: 1.0
url:	https://vuldb.com/?ctiid.299826	Trust: 1.0
url:	https://vuldb.com/?submit.513750	Trust: 1.0

sources: CNVD: CNVD-2025-13069 // NVD: CVE-2025-2359

SOURCES

db:	CNVD	id:	CNVD-2025-13069
db:	NVD	id:	CVE-2025-2359

LAST UPDATE DATE

2025-06-21T23:28:41.188000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-13069	date:	2025-06-20T00:00:00
db:	NVD	id:	CVE-2025-2359	date:	2025-03-17T04:15:11.320

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-13069	date:	2025-06-20T00:00:00
db:	NVD	id:	CVE-2025-2359	date:	2025-03-17T04:15:11.320