[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frfQam6x_bkwHgz1qXiDpugpnbJemLm-UA6ecvPVPhRw":3,"g5a-family:dlink\u002Fdir-825_firmware":119,"g5a-ex:dlink\u002Fdir-825_firmware@*":120},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":37,"kevVulnerabilities":91,"seoMetadata":97,"meta":116},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":29},"dlink","dir-825_firmware",6,13,1,"2025-09-18",[14,18,20,22,24,27],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.08.01",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.33.0.44ebdd4-embedded",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"2022.01.13-13.48",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"2.03",{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"2.10",5,{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},"2.10b02","Dir-825 Firmware by Dlink is a technology product with 6 tracked versions and 13 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35,36],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},[38,46,51,57,62,69,73,77,81,85],{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":4,"epssScore":45},"CVE-2019-16920","Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a \"PingTest\" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.","2019-09-27",9.8,"v3.1","Critical",0.99996,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":17,"epssScore":50},"CVE-2021-46442","In the \"webupg\" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters \"autoupgrade.asp\", and perform functions such as downloading configuration files and updating firmware without authorization.","2022-04-27",0.5606,{"cveId":52,"description":53,"publishedDate":49,"cvssScore":54,"cvssVersion":43,"severity":55,"isKev":17,"epssScore":56},"CVE-2021-46441","In the \"webupg\" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use \"cmd\" parameters to execute arbitrary system commands after obtaining authorization.",8.8,"High",0.32591,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":54,"cvssVersion":43,"severity":55,"isKev":17,"epssScore":61},"CVE-2020-10214","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server.","2020-03-07",0.18327,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":43,"severity":67,"isKev":17,"epssScore":68},"CVE-2024-0717","A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file \u002Fdevinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.","2024-01-19",5.3,"Medium",0.18195,{"cveId":70,"description":71,"publishedDate":60,"cvssScore":54,"cvssVersion":43,"severity":55,"isKev":17,"epssScore":72},"CVE-2020-10215","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.",0.05255,{"cveId":74,"description":75,"publishedDate":60,"cvssScore":54,"cvssVersion":43,"severity":55,"isKev":17,"epssScore":76},"CVE-2020-10216","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.",0.05039,{"cveId":78,"description":79,"publishedDate":60,"cvssScore":54,"cvssVersion":43,"severity":55,"isKev":17,"epssScore":80},"CVE-2020-10213","An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.",0.04996,{"cveId":82,"description":83,"publishedDate":12,"cvssScore":54,"cvssVersion":43,"severity":55,"isKev":17,"epssScore":84},"CVE-2025-10666","A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This vulnerability only affects products that are no longer supported by the maintainer.",0.03372,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":43,"severity":67,"isKev":17,"epssScore":90},"CVE-2022-29332","D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the \"..\u002F..\u002F..\u002F..\u002F\" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server.","2022-05-17",6.5,0.01452,[92],{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"severity":44,"isKev":4,"epssScore":45,"cisaVulnName":93,"cisaDateAdded":94,"cisaShortDescription":95,"cisaRequiredAction":96},"D-Link Multiple Routers Command Injection Vulnerability","2022-03-25","Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.","The impacted product is end-of-life and should be disconnected if still in use.",{"title":98,"metaDescription":99,"keywords":100,"structuredData":101},"Dir-825 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-825 Firmware by Dlink covering 6 versions with 13 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-825 Firmware vulnerabilities, Dir-825 Firmware security, Dir-825 Firmware CVE, Dlink Dir-825 Firmware, Dir-825 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-825 Firmware KEV, Dir-825 Firmware exploited vulnerabilities",{"@context":102,"@type":103,"name":104,"description":99,"url":105,"manufacturer":106,"applicationCategory":110,"softwareVersion":111,"mainEntity":112},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-825 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-825_firmware",{"@type":107,"name":108,"url":109},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","6 versions tracked",{"@type":113,"name":114,"description":115,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-825 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-825 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":117,"apiVersion":118},"2026-10-18T15:01:58.851Z","3.0",[],{"rows":121,"total":11,"capped":17,"failed":16},[122],{"cveId":39,"name":93,"severity":44,"cvss":42,"added":94,"epss":45,"published":123,"ranges":124,"checked":4,"hits":125,"covers":17},"2019-09-27T12:15:10.017",[],[]]