CVE-2025-60675 is a command injection vulnerability affecting the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin. The vulnerability arises because the timelycheck and sysconf binaries parse fields from the /tmp/new_qos.rule configuration file and concatenate them into command strings executed via system() calls without input sanitization. This allows an attacker with write permissions to /tmp/new_qos.rule to execute arbitrary commands on the device, potentially compromising its integrity and confidentiality.

An attacker who can write to the /tmp/new_qos.rule file on the affected router firmware can execute arbitrary commands with the privileges of the vulnerable binaries. This can lead to partial compromise of the device, including information disclosure and integrity violations. The CVSS score of 5.4 reflects a medium impact with low complexity and low privileges required but no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, restrict write access to the /tmp/new_qos.rule file and monitor for unauthorized modifications. Avoid exposing the device to untrusted users who could write to this file.