CVE-2025-55582

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-55582
D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch-dog.sh`, which blindly respawns binaries such as `dcp` and `signalc` without verifying integrity, authenticity, or permissions. An attacker with local filesystem access (via physical access, firmware modification, or debug interfaces) can replace these binaries with malicious payloads. The script executes these binaries as root in an infinite loop, leading to persistent privilege escalation and arbitrary code execution. This issue is mitigated in v1.09.02, but the product is officially End-of-Life and unsupported.

6.6 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.7 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cybermaya.in/posts/Post-43/ Third Party Advisory Exploit
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10431 Product
https://www.dlink.com/en/security-bulletin/ Not Applicable
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dcs-825l_firmware:1.08.01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dcs-825l:-:*:*:*:*:*:*:*
History

09 Sep 2025, 15:20

Type Values Removed Values Added
First Time Dlink
Dlink dcs-825l Firmware
Dlink dcs-825l
References () https://cybermaya.in/posts/Post-43/ - () https://cybermaya.in/posts/Post-43/ - Third Party Advisory, Exploit
References () https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10431 - () https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10431 - Product
References () https://www.dlink.com/en/security-bulletin/ - () https://www.dlink.com/en/security-bulletin/ - Not Applicable
CPE cpe:2.3:h:dlink:dcs-825l:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dcs-825l_firmware:1.08.01:*:*:*:*:*:*:*

29 Aug 2025, 14:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 6.6

28 Aug 2025, 19:15

Type Values Removed Values Added
References
  • () https://cybermaya.in/posts/Post-43/ -
Summary
  • (es) El firmware v1.08.01 de D-Link DCS-825L contiene una vulnerabilidad en el script de vigilancia `mydlink-watch-dog.sh`, que genera archivos binarios como `dcp` y `signalc` sin verificar su integridad, autenticidad ni permisos. Un atacante con acceso al sistema de archivos local (mediante acceso físico, modificación del firmware o interfaces de depuración) puede reemplazar estos archivos binarios con payloads maliciosos. El script ejecuta estos archivos binarios como root en un bucle infinito, lo que provoca una escalada persistente de privilegios y la ejecución de código arbitrario. Este problema se ha mitigado en la v1.09.02, pero el producto ha finalizado oficialmente su ciclo de vida y no recibe soporte.

27 Aug 2025, 21:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-494
CWE-269

27 Aug 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-27 20:15

Updated : 2025-09-09 15:20

NVD link : CVE-2025-55582

Mitre link : CVE-2025-55582

CVE.ORG link : CVE-2025-55582

JSON object : View

Products Affected

dlink

  • dcs-825l_firmware
  • dcs-825l
CWE
CWE-269

Improper Privilege Management

CWE-494

Download of Code Without Integrity Check