CVE-2025-1103

MEDIUM 6.5CVE-2025-1103 · Published 07/02/2025 · updated 17/06/2026

In short

CVE-2025-1103 is a MEDIUM (CVSS 6.5) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 14.1%, higher than 96.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References

tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9 · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
dlink.com · Product
tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-set_wifi_blacklists-Vulnerability-1870448e619580e5bf09cf628692f7a9 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free