DF
Product
Dir-825 Firmware
On CISA KEVExploited in the wild
19
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 10Medium 2Low 0
Watch
Add Dir-825 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16920 In wildKEV | 9.8 | Sep 27 | D-Link Multiple Routers Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2025-10666 | 9.8 | Sep 18 | D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow Affected: through 2.10 |
| CVE-2025-10034 | 9.8 | Sep 6 | D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow Affected: 1.08.01 |
| CVE-2025-8949 | 9.8 | Aug 14 | D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow Affected: 2.10 |
| CVE-2025-7206 | 9.8 | Jul 8 | D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow Affected: 2.10 |
| CVE-2022-47035 | 9.8 | Jan 31 | Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint Affected: through 1.33.0.44ebdd4-embedded |
| CVE-2021-46442 | 9.8 | Apr 27 | In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration… Affected: All versions, or not specified |
Showing 7