CVE-2025-45729 Missing authorization in n/a

What is CVE-2025-45729?

CVE-2025-45729 is a medium-severity missing authorization vulnerability in n/a, published on 27 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.

Weakness: CWE-284

Which versions are affected by CVE-2025-45729?

It affects 1 product.

Products include Dlink Dir-823 Pro Firmware.

How do I fix CVE-2025-45729?

No fix has been published for CVE-2025-45729 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2025-45729 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-45729 exists.

Other vulnerabilities in n/a

• CVE-2022-28573 Command injection in n/a Critical 9.8
• CVE-2021-46452 Command injection in n/a Critical 9.8
• CVE-2021-46453 Command injection in n/a Critical 9.8
• CVE-2021-46454 Command injection in n/a Critical 9.8
• CVE-2021-46455 Command injection in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vf67-95g7-3w77.