Medium severity5.4NVD Advisory· Published Nov 13, 2025· Updated Jul 5, 2026
CVE-2025-60671
CVE-2025-60671
Description
A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linux_vlan_reinit file. The vulnerability occurs because content read from this file is only partially validated for a prefix and then formatted using vsnprintf() before being executed with system(), allowing an attacker with write access to /var/system/linux_vlan_reinit to execute arbitrary commands on the device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:dlink:dir-823g_firmware:1.0.2b05_20181207:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-823G/CVE-2025-60671.mdnvdExploitThird Party Advisory
- www.dlink.com/en/security-bulletin/nvdVendor Advisory
- www.dlink.com/ennvdProduct
News mentions
0No linked articles in our index yet.