CVE-2025-14208
A security flaw has been discovered in D-Link DIR-823X up to 20250416.
Published Dec 8, 2025 · updated Oct 14, 2026 · dlink dir-823x firmware
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Timeline
Detection, updates, and resolution for this record.
Dec 8, 2025 · NIST NVD
Detected
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Oct 14, 2026 · NIST NVD
Updated
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Affected
- cpe dlink/dir-823x firmwareversion unspecified
Sources
- CVE.orgCVE-2025-14208
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-14208
30-day exploitation probability 3.4%
first.org - NIST NVDCVE-2025-14208
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack remotely. The exploit
nvd.nist.gov