CVE-2025-55582

D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch-dog.sh`, which blindly respawns binaries such as `dcp` and `signalc` without verifying integrity, authenticity, or permissions. An attacker with local filesystem access (via physical access, firmware modification, or debug interfaces) can replace these binaries with malicious payloads. The script executes these binaries as root in an infinite loop, leading to persistent privilege escalation and arbitrary code execution. This issue is mitigated in v1.09.02, but the product is officially End-of-Life and unsupported.

CVSS v3 6.6 MEDIUM

6.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.7 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cybermaya.in/posts/Post-43/	Third Party Advisory Exploit
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10431	Product
https://www.dlink.com/en/security-bulletin/	Not Applicable

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:dlink:dcs-825l_firmware:1.08.01:*:*:*:*:*:*:*

cpe:2.3:h:dlink:dcs-825l:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-08-27 20:15

Updated : 2025-09-09 15:20

NVD link : CVE-2025-55582

Mitre link : CVE-2025-55582

CVE.ORG link : CVE-2025-55582

JSON object : View

Products Affected

dlink

dcs-825l_firmware
dcs-825l

CWE

CWE-269

Improper Privilege Management

CWE-494

Download of Code Without Integrity Check

{"id": "CVE-2025-55582", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.7}]}, "published": "2025-08-27T20:15:33.113", "references": [{"url": "https://cybermaya.in/posts/Post-43/", "tags": ["Third Party Advisory", "Exploit"], "source": "[email protected]"}, {"url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10431", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://www.dlink.com/en/security-bulletin/", "tags": ["Not Applicable"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}, {"lang": "en", "value": "CWE-494"}]}], "descriptions": [{"lang": "en", "value": "D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch-dog.sh`, which blindly respawns binaries such as `dcp` and `signalc` without verifying integrity, authenticity, or permissions. An attacker with local filesystem access (via physical access, firmware modification, or debug interfaces) can replace these binaries with malicious payloads. The script executes these binaries as root in an infinite loop, leading to persistent privilege escalation and arbitrary code execution. This issue is mitigated in v1.09.02, but the product is officially End-of-Life and unsupported."}, {"lang": "es", "value": "El firmware v1.08.01 de D-Link DCS-825L contiene una vulnerabilidad en el script de vigilancia `mydlink-watch-dog.sh`, que genera archivos binarios como `dcp` y `signalc` sin verificar su integridad, autenticidad ni permisos. Un atacante con acceso al sistema de archivos local (mediante acceso f\u00edsico, modificaci\u00f3n del firmware o interfaces de depuraci\u00f3n) puede reemplazar estos archivos binarios con payloads maliciosos. El script ejecuta estos archivos binarios como root en un bucle infinito, lo que provoca una escalada persistente de privilegios y la ejecuci\u00f3n de c\u00f3digo arbitrario. Este problema se ha mitigado en la v1.09.02, pero el producto ha finalizado oficialmente su ciclo de vida y no recibe soporte."}], "lastModified": "2025-09-09T15:20:32.867", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dcs-825l_firmware:1.08.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "914E1900-3F07-4683-A0ED-EBEE99E2485C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dcs-825l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "465C691A-5068-474F-9BCF-D3CD99388EE4"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}