CVE-2025-60671 is a command injection vulnerability in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin. The timelycheck and sysconf binaries read from /var/system/linux_vlan_reinit and perform only partial validation of its content for a prefix. The content is then formatted using vsnprintf() and executed via system(), allowing an attacker with write permissions to the file to execute arbitrary commands on the device. This vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command).

An attacker who can write to the /var/system/linux_vlan_reinit file on the affected router firmware can execute arbitrary commands with the privileges of the affected binaries. This can lead to limited confidentiality and integrity impact on the device, but no availability impact is indicated. The CVSS score of 5.4 reflects a medium severity with network attack vector, low attack complexity, and requiring low privileges but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Until a patch is available, restrict write access to the /var/system/linux_vlan_reinit file to trusted users only to prevent exploitation.