Dir-825 Firmware (Dlink) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-04-27. Vendor: Dlink.
CVEs of Dir-825 Firmware
- CVE-2026-7069 - CVSS 8.6 (high), 2026-04-27: A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component…
- CVE-2026-7068 - CVSS 8.8 (high), 2026-04-27: A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such…
- CVE-2025-10666 - CVSS 9.8 (critical), 2025-09-18: A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The…
- CVE-2025-10034 - CVSS 9.8 (critical), 2025-09-06: A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function get_ping6_app_stat of the file ping6_response.cg of the component httpd.…
- CVE-2025-8949 - CVSS 9.8 (critical), 2025-08-14: A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function get_ping_app_stat of the file ping_response.cgi of the…
- CVE-2025-7206 - CVSS 9.8 (critical), 2025-07-09: A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub_410DDC of the file…
- CVE-2025-6292 - CVSS 8.8 (high), 2025-06-20: A vulnerability has been found in D-Link DIR-825 2.03 and classified as critical. This vulnerability affects the function sub_4091AC of the component HTTP…
- CVE-2025-6291 - CVSS 8.8 (high), 2025-06-20: A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function do_file of the component HTTP POST Request…
- CVE-2024-0717 - CVSS 5.3 (medium), 2024-01-19: A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815,…
- CVE-2022-47035 - CVSS 9.8 (critical), 2023-01-31: Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the…
- CVE-2022-29332 - CVSS 6.5 (medium), 2022-05-17: D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's…
- CVE-2021-46442 - CVSS 9.8 (critical), 2022-04-27: In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as…
- CVE-2021-46441 - CVSS 8.8 (high), 2022-04-27: In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system…
- CVE-2021-29296 - CVSS 7.5 (high), 2021-08-10: Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could…
- CVE-2020-10214 - CVSS 8.8 (high), 2020-03-07: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to…
- CVE-2020-10213 - CVSS 8.8 (high), 2020-03-07: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter…
- CVE-2020-10216 - CVSS 8.8 (high), 2020-03-07: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a…
- CVE-2020-10215 - CVSS 8.8 (high), 2020-03-07: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a…
- CVE-2019-16920 - CVSS 9.8 (critical), 2019-09-27: Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an…
