DF
Product
Dir-825 Firmware
On CISA KEVExploited in the wild
19
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 10Medium 2Low 0
Watch
Add Dir-825 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16920 In wildKEV | 9.8 | Sep 27 | D-Link Multiple Routers Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2025-10666 | 9.8 | Sep 18 | A security flaw has been discovered in D-Link DIR-825 up to 2.10 Affected: through 2.10 |
| CVE-2025-10034 | 9.8 | Sep 6 | A vulnerability was found in D-Link DIR-825 1.08.01 Affected: 1.08.01 |
| CVE-2025-8949 | 9.8 | Aug 14 | A vulnerability was identified in D-Link DIR-825 2.10 Affected: 2.10 |
| CVE-2025-7206 | 9.8 | Jul 9 | A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10 Affected: 2.10 |
| CVE-2022-47035 | 9.8 | Jan 31 | Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint Affected: through 1.33.0.44ebdd4-embedded |
| CVE-2021-46442 | 9.8 | Apr 27 | In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration… Affected: All versions, or not specified |
| CVE-2026-7068 | 8.8 | Apr 26 | D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow Affected: 3.00b32 |
| CVE-2025-6292 | 8.8 | Jun 20 | A vulnerability has been found in D-Link DIR-825 2.03 and classified as critical Affected: 2.03 |
| CVE-2025-6291 | 8.8 | Jun 20 | A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03 Affected: 2.03 |
| CVE-2021-46441 | 8.8 | Apr 27 | In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining… Affected: All versions, or not specified |
| CVE-2020-10216 | 8.8 | Mar 7 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices Affected: 2.10 |
| CVE-2020-10215 | 8.8 | Mar 7 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices Affected: 2.10 |
| CVE-2020-10214 | 8.8 | Mar 7 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices Affected: 2.10 |
| CVE-2020-10213 | 8.8 | Mar 7 | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices Affected: 2.10 |
| CVE-2026-7069 | 8.0 | Apr 27 | D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow Affected: 3.00b32 |
| CVE-2021-29296 | 7.5 | Aug 10 | Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service Affected: 2.10b02 |
| CVE-2022-29332 | 6.5 | May 17 | D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal Affected: 2022.01.13-13.48 |
| CVE-2024-0717 | 5.3 | Jan 19 | A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S,… Affected: through 2024-01-12 |
Showing 19