[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB6CASThXR3dpm1n3zoJB3-tkoGvqvVb5M5UDEs9C6eE":3,"g5a-risk:CVE-2025-55581":134},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":45,"references":46,"referencesCount":62,"weaknesses":63,"weaknessesCount":62,"isActivelyExploited":44,"cisaInfo":26,"otxData":26,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":122,"notableEvents":123},"CVE-2025-55581","What is CVE-2025-55581?","D-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure implementation in the mydlink-watch-dog.sh script. The script monitors and respawns the `dcp` and `signalc` binaries without validating their integrity, origin, or permissions. An attacker with filesystem access (e.g., via UART or firmware modification) may replace these binaries to achieve persistent arbitrary code execution with root privileges. The issue stems from improper handling of executable trust and absence of integrity checks in the watchdog logic.","D-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure implementation in the mydlink-watch-dog.sh script. The script monito...","2025-08-22T18:15:35.857","2025-09-12T19:16:37.02",7.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.5,[],[],0.00181,[31,31,31,31,31,31,31],"High",[35,40],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"dlink","dcs-825l_firmware","*","cpe:2.3:o:dlink:dcs-825l_firmware:*:*:*:*:*:*:*:*",{"vendor":36,"product":41,"version":42,"criteria":43,"vulnerable":44},"dcs-825l","-","cpe:2.3:h:dlink:dcs-825l:-:*:*:*:*:*:*:*",false,2,[47,53,58],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fcybermaya.in\u002Fposts\u002FPost-42\u002F","Cybermaya",[51,52],"Third Party Advisory","Exploit",{"url":54,"source":55,"tags":56},"https:\u002F\u002Flegacy.us.dlink.com\u002Fpages\u002Fproduct.aspx?id=f9c0458bfe7b4ff3bf7fad1cf6fcc9a1","Dlink",[57],"Product",{"url":59,"source":55,"tags":60},"https:\u002F\u002Fwww.dlink.com\u002Fen\u002Fsecurity-bulletin\u002F",[61],"Not Applicable",3,[64,72,77],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",{"id":73,"name":74,"description":75,"extendedDescription":68,"status":69,"abstraction":76,"structure":71},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","Class",{"id":78,"name":79,"description":80,"extendedDescription":81,"status":69,"abstraction":70,"structure":71},"CWE-494","Download of Code Without Integrity Check","The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.","An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.",[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2025-55581? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-55581, a high severity cyber security vulnerability from 2025. D-Link DCS-825L firmware version 1.08.01 and possibly prior...","CVE-2025-55581, CVE-2025-55581 vulnerability, CVE-2025-55581 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, dlink security, dcs-825l_firmware vulnerability, dcs-825l vulnerability","\u002Fwhat-is\u002Fcve-2025-55581",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-55581","Cybersecurity","CVE-2025-55581, CVE-2025-55581 vulnerability, CVE-2025-55581 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":110,"Negate":26,"Nodes":111},"AND",[112,118],{"Operator":113,"Negate":44,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":117},"3C7A65BD-87B7-478A-8416-1196C8C3B9C6","1.08.01",{"Operator":113,"Negate":44,"CPEMatch":119},[120],{"Vulnerable":44,"Criteria":43,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"465C691A-5068-474F-9BCF-D3CD99388EE4",[],[124],{"id":125,"eventType":126,"eventTime":127,"details":128,"label":129,"color":130},"8439ac56-8a7a-4873-8837-c8cd114a8780","NEW_NVD","2025-08-23T04:01:11.000547+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":132,"version":133},1792364898134,"2.0",{"score":135,"band":136,"action":137,"scoredAt":138},47,"Medium","Plan remediation","2026-10-16T07:08:34.13205+00:00"]