CVE-2025-2359
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 17, 2025
CWE ID 79
Summary
CVE-2025-2359 is a critical vulnerability affecting the D-Link DIR-823G 1.0.2B05_20181207 router. The issue lies within the SetDDNSSettings function of the /HNAP1/ component in the DDNS Service. Manipulation of the SOAPAction argument results in improper authorization, enabling remote attacks. The exploit for this vulnerability has been made public, increasing the risk for potential exploitation. However, it is important to note that this vulnerability only impacts unsupported D-Link products.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.