CVE-2025-10634 | D-Link DIR-823X 240126/240802/250416 Environment Variable /usr/sbin/goahead sub_412E7C terminal_addr/server_ip/server_port command injection

A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/server_port causes command injection.

This vulnerability is handled as CVE-2025-10634. The attack can be initiated remotely. Additionally, an exploit exists.