D-Link DIR-823X Command Injection Vulnerability in Wi-Fi Blacklist Management

A command injection vulnerability has been identified in the D-Link DIR-823X router, specifically in the 250416 firmware version. The issue arises in the '/goform/set_wifi_blacklists' function, where the 'macList' parameter is not properly validated. This lack of validation allows remote attackers to inject malicious commands that could be executed on the device.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected router.

Reproduction

To reproduce this vulnerability, log into the D-Link DIR-823X router and navigate to the Wi-Fi blacklist management feature. The 'macList' parameter can be manipulated by injecting malicious strings that exploit the command execution flaw. This can be done by sending a crafted request that includes the injected command in the 'macList' parameter.