Teams Malware Deployment Possible via Browser Cache Smuggling

Rilide Malware: A Malicious Browser Extension Targeting Chrome And Edge Users for Credential Theft – Active IOCs

March 25, 2025

CVE-2025-2717 – D-Link DIR-823X Vulnerability

Severity

Medium

Analysis Summary

CVE-2025-2717

A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Impact

Gain Access

Indicators of Compromise

CVE

CVE-2025-2717

Affected Vendors

D-Link

Affected Products

D-Link DIR-823X - 240126 - 240802

Remediation

Refer to D-Link Website for patch, upgrade, or suggested workaround information.

D-Link Website

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo