What’s Vulnerable › Vulnerabilities

CVE-2025-0492: D-Link DIR-823X FUN_00412244 null pointer dereference

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-01-15 · updated 2026-06-17
• Weakness: CWE-404

Description

A vulnerability has been found in D-Link DIR-823X 240126/240802 and classified as critical. Affected by this vulnerability is the function FUN_00412244. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• D-Link DIR-823X: 240126, 240802

References

• https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-FUN_00412244-NULL-Pointer-Dereference-1730448e619580fcb7f9d871c6e7190a
• https://vuldb.com/?ctiid.291937
• https://vuldb.com/?id.291937
• https://vuldb.com/?submit.475301
• https://www.dlink.com/

Get alerted when CVE-2025-0492 or the next vulnerability affects your stack