Security readout for executives and security teams
Plain-English summary
This CVE affects the D-Link DIR-823-Pro firmware 1.02 according to the provided record. Unauthorized users may be able to enable and access Telnet, increasing risk of router takeover or network pivoting. The supplied sources do not name a vendor patch or confirm real-world exploitation.
Executive priority
Treat as a moderate infrastructure hygiene issue. Prioritize internet-facing or unmanaged branch routers first, because unauthorized Telnet access can weaken the network boundary even without confirmed active exploitation.
Technical view
The issue is improper permission control (CWE-284) allowing unauthenticated network attackers, with user interaction per CVSS, to turn on and access Telnet services. CVSS 3.1 is 6.3 medium, with low confidentiality, integrity, and availability impact. Structured affected-product metadata is incomplete, listing n/a despite the description naming DIR-823-Pro 1.02.
Likely exposure
Exposure is likely limited to organizations or sites using D-Link DIR-823-Pro firmware 1.02, especially where router management interfaces are reachable from untrusted networks. The provided CVE data has incomplete affected-product fields, so confirm model and firmware directly from asset inventory.
Exploitation context
The source bundle does not show CISA KEV listing, active exploitation, public weaponization, or confirmed vendor remediation. The references describe unauthorized Telnet access, but evidence provided here is limited to the CVE record and two researcher pages.
Researcher notes
Key gaps are incomplete affected-product metadata, no named patch, and no independent exploitation evidence in the supplied bundle. Validation should focus on model, firmware, management-plane reachability, and whether Telnet can be enabled without proper authorization.
Mitigation direction
- Check D-Link guidance for updated firmware or official mitigation.
- Disable Telnet and remote administration where configurable.
- Restrict router management access to trusted administrative networks only.
- Block untrusted access to management ports at perimeter controls.
- Replace or isolate affected devices if no vendor fix exists.
Validation and detection
- Inventory D-Link DIR-823-Pro devices and firmware versions.
- Confirm whether firmware 1.02 is present in production.
- Review management settings for Telnet and remote administration exposure.
- Verify WAN-side management access is blocked.
- Check device logs for unexpected Telnet enablement or admin changes.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-284: Authorization and privilege behavior lookup
Authorization weaknesses can support privilege escalation and valid-account review, depending on exploit path. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2025-45729 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.3 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L2.83.4CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
6.3MediumVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://www.kdev.site/2025/04/02/d-link-823_pro-unauthorized-telnet-access/CVE reference, mitre
- https://www.kdev.site/cve-2025-45729/CVE reference, mitre
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Access Control
Improper Access Control represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.