[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWN2LOzURS67gT-9DhxHib5PHJhMzBFGk1F_D946SwM0":3,"g5a-family:dlink\u002Fdir-825":114,"g5a-ex:dlink\u002Fdir-825@*":124},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":81,"seoMetadata":92,"meta":111},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"dlink","dir-825",3,15,2,"2025-09-18",[14,18,21],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"g1",0,false,{"version":19,"cve_count":20,"kev_count":20,"has_kev":4},"r1",1,{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},"r2","Dir-825 by Dlink is a technology product with 3 tracked versions and 15 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":20,"has_kev":4},{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},[29,37,42,47,53,58,65,69,73,77],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":4,"epssScore":36},"CVE-2019-16920","Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a \"PingTest\" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.","2019-09-27",9.8,"v3.1","Critical",0.99996,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":17,"epssScore":41},"CVE-2021-46442","In the \"webupg\" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters \"autoupgrade.asp\", and perform functions such as downloading configuration files and updating firmware without authorization.","2022-04-27",0.5606,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":4,"epssScore":46},"CVE-2020-29557","An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.","2021-01-29",0.5432,{"cveId":48,"description":49,"publishedDate":40,"cvssScore":50,"cvssVersion":34,"severity":51,"isKev":17,"epssScore":52},"CVE-2021-46441","In the \"webupg\" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use \"cmd\" parameters to execute arbitrary system commands after obtaining authorization.",8.8,"High",0.32591,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":50,"cvssVersion":34,"severity":51,"isKev":17,"epssScore":57},"CVE-2020-10214","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server.","2020-03-07",0.18327,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":34,"severity":63,"isKev":17,"epssScore":64},"CVE-2024-0717","A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file \u002Fdevinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.","2024-01-19",5.3,"Medium",0.18195,{"cveId":66,"description":67,"publishedDate":56,"cvssScore":50,"cvssVersion":34,"severity":51,"isKev":17,"epssScore":68},"CVE-2020-10215","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.",0.05255,{"cveId":70,"description":71,"publishedDate":56,"cvssScore":50,"cvssVersion":34,"severity":51,"isKev":17,"epssScore":72},"CVE-2020-10216","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.",0.05039,{"cveId":74,"description":75,"publishedDate":56,"cvssScore":50,"cvssVersion":34,"severity":51,"isKev":17,"epssScore":76},"CVE-2020-10213","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.",0.04996,{"cveId":78,"description":79,"publishedDate":12,"cvssScore":50,"cvssVersion":34,"severity":51,"isKev":17,"epssScore":80},"CVE-2025-10666","A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This vulnerability only affects products that are no longer supported by the maintainer.",0.03372,[82,87],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"severity":35,"isKev":4,"epssScore":36,"cisaVulnName":83,"cisaDateAdded":84,"cisaShortDescription":85,"cisaRequiredAction":86},"D-Link Multiple Routers Command Injection Vulnerability","2022-03-25","Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":43,"description":44,"publishedDate":45,"cvssScore":33,"severity":35,"isKev":4,"epssScore":46,"cisaVulnName":88,"cisaDateAdded":89,"cisaShortDescription":90,"cisaRequiredAction":91},"D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","2021-11-03","D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution.","Apply updates per vendor instructions.",{"title":93,"metaDescription":94,"keywords":95,"structuredData":96},"Dir-825 by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-825 by Dlink covering 3 versions with 15 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-825 vulnerabilities, Dir-825 security, Dir-825 CVE, Dlink Dir-825, Dir-825 threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-825 KEV, Dir-825 exploited vulnerabilities",{"@context":97,"@type":98,"name":99,"description":94,"url":100,"manufacturer":101,"applicationCategory":105,"softwareVersion":106,"mainEntity":107},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-825","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-825",{"@type":102,"name":103,"url":104},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","3 versions tracked",{"@type":108,"name":109,"description":110,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-825 Security Vulnerabilities","Security vulnerabilities affecting Dir-825 by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":112,"apiVersion":113},"2026-10-18T15:48:22.925Z","3.0",[115,118,120,122],{"product":116,"cves":117},"dir-825_firmware",13,{"product":119,"cves":9},"dir-825_rev.b",{"product":121,"cves":9},"dir-825_rev.b_firmware",{"product":123,"cves":20},"dir-825_r1_firmware",{"rows":125,"total":11,"capped":17,"failed":16},[126,130],{"cveId":30,"name":83,"severity":35,"cvss":33,"added":84,"epss":36,"published":127,"ranges":128,"checked":4,"hits":129,"covers":17},"2019-09-27T12:15:10.017",[],[],{"cveId":43,"name":88,"severity":35,"cvss":33,"added":89,"epss":46,"published":131,"ranges":132,"checked":4,"hits":133,"covers":17},"2021-01-29T20:15:12.933",[],[]]