CVE-2025-1103: D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-02-07 · updated 2026-06-17
Weakness: CWE-404

Description

A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

D-Link DIR-823X: 240126, 240802

References

https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9?pvs=73
https://vuldb.com/?ctiid.294933
https://vuldb.com/?id.294933
https://vuldb.com/?submit.489603
https://www.dlink.com/
https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9

Get alerted when CVE-2025-1103 or the next vulnerability affects your stack