Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

dlink dir-825 firmware vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3

CVE-2024-0717

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR...
Dlink Dir-825acg1 FirmwareDlink Dir-841 FirmwareDlink Dir-1260 FirmwareDlink Dir-822 FirmwareDlink Dir-x1530 FirmwareDlink Dir-825 FirmwareDlink Dir-615 FirmwareDlink Dir-842 FirmwareDlink Dir-853 FirmwareDlink Dir-1210 FirmwareDlink Dir-806a FirmwareDlink Dir-815 FirmwareDlink Dsl-245gr FirmwareDlink Dsl-g2452gr FirmwareDlink Dir-878 FirmwareDlink Dir-825acf FirmwareDlink Dir-615t FirmwareDlink Dir-300 FirmwareDlink Dir-842s FirmwareDlink Dir-815s FirmwareDlink Dsl-2640u FirmwareDlink Dir-2150 Firmware
8.8
CVSSv3

CVE-2022-43642

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the YouTube plugin for the xupnpd servi...
Dlink Dir-825/ee FirmwareDlink Dir-825/ac Firmware
8.8
CVSSv3

CVE-2022-43643

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for the xupnpd servi...
Dlink Dir-825/ee FirmwareDlink Dir-825/ac Firmware
8.8
CVSSv3

CVE-2022-43644

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd serv...
Dlink Dir-825/ee FirmwareDlink Dir-825/ac Firmware
8.8
CVSSv3

CVE-2022-43645

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IVI plugin for the xupnpd service, ...
Dlink Dir-825/ee FirmwareDlink Dir-825/ac Firmware
8.8
CVSSv3

CVE-2022-43646

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vimeo plugin for the xupnpd service...
Dlink Dir-825/ee FirmwareDlink Dir-825/ac Firmware
8.8
CVSSv3

CVE-2022-43647

This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TC...
Dlink Dir-825/ee FirmwareDlink Dir-825/ac Firmware
9.8
CVSSv3

CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows malicious user to execute arbitrary code via the GetConfig method to the /CPE endpoint.
Dlink Dir-825 Firmware
6.5
CVSSv3

CVE-2022-29332

D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server.
Dlink Dir-825 Firmware 2022.01.13-13.48
8.8
CVSSv3

CVE-2021-46441

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.
Dlink Dir-825 Firmware -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-38627CVE-2022-45803CVE-2024-38319cameratemplate injectionCVE-2024-27801CVE-2024-0762CVE-2024-5791unauthorized
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook