Sign-up

ID

VAR-202511-0547


CVE

CVE-2025-60700


DESCRIPTION

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` and `librcm.so` binaries. The `sub_4455BC` function in `prog.cgi` stores user-supplied `SetDMZSettings/IPAddress` values in NVRAM via `nvram_safe_set("dmz_ipaddr", ...)`. These values are later retrieved in the `DMZ_run` function of `librcm.so` using `nvram_safe_get` and concatenated into `iptables` shell commands executed via `twsystem()` without any sanitization. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router's web interface.

Trust: 1.0

sources: NVD: CVE-2025-60700

AFFECTED PRODUCTS

vendor:dlinkmodel:dir-882scope:eqversion:1.02b02

Trust: 1.0

sources: NVD: CVE-2025-60700

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2025-60700
value: MEDIUM

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2025-60700
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.5
version: 3.1

Trust: 1.0

sources: NVD: CVE-2025-60700

PROBLEMTYPE DATA

problemtype:CWE-77

Trust: 1.0

sources: NVD: CVE-2025-60700

EXTERNAL IDS

db:NVDid:CVE-2025-60700

Trust: 1.0

sources: NVD: CVE-2025-60700

REFERENCES

url:https://github.com/yifan20020708/sgtaint-0-day/blob/main/dlink/dlink-dir-882/cve-2025-60700.md

Trust: 1.0

url:https://www.dlink.com/en/security-bulletin/

Trust: 1.0

url:https://github.com/yifan20020708/sgtaint-0-day/blob/main/dlink/dlink-dir-882/3.md

Trust: 1.0

url:https://www.dlink.com/

Trust: 1.0

sources: NVD: CVE-2025-60700

SOURCES

db:NVDid:CVE-2025-60700

LAST UPDATE DATE

2025-11-19T23:28:47.796000+00:00


SOURCES UPDATE DATE

db:NVDid:CVE-2025-60700date:2025-11-17T12:28:40.547

SOURCES RELEASE DATE

db:NVDid:CVE-2025-60700date:2025-11-13T18:15:54.010