A critical NULL pointer dereference vulnerability in D-Link DIR-823G routers allows unauthenticated attackers to cause a Denial of Service through crafted network requests.

The vulnerability exists in the SetWLanRadioSettings function, where improper input validation leads to a NULL pointer dereference. An unauthenticated attacker can trigger this condition by sending a specifically crafted HTTP request to the device.

The successful exploitation of this vulnerability results in a Denial of Service, rendering the affected networking hardware unresponsive. This can cause significant operational disruption for businesses relying on these devices for connectivity, leading to downtime and loss of productivity. With a CVSS score of 7.5, the vulnerability is classified as High, reflecting the ease of remote exploitation despite the limited impact to confidentiality and integrity.

Immediate Action: Monitor official D-Link security advisories for the release of a firmware patch and apply it to all affected units immediately.

Proactive Monitoring: Review device access logs for unusual or malformed HTTP requests directed at the management interface and monitor for sudden device reboots or service outages.

Compensating Controls: Restrict access to the device management interface to trusted internal IP addresses using Access Control Lists (ACLs) to prevent unauthenticated remote access.

Public Exploit Available: Yes — a public proof-of-concept is documented in the technical write-up referenced by the CVE record.

Given the availability of a public proof-of-concept and the potential for service disruption, administrators should prioritize the hardening of these devices. While awaiting an official vendor patch, ensure that the management interface is not exposed to the public internet and limit administrative access to known, secure segments of the network.