GCVE - cpe:2.3:h:dlink:dir-852:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-852:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 852 (`b90ba3bb-caec-5438-917d-578e4956b942`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9752`	not_vulnerable	2026-06-08 07:47:09.718708	D-Link DIR-852 SOAP Service soap.cgi soapcgi_main os command injection HIGH (7.3) A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-09-01T00:02:06.532Z Updated: 2025-09-02T15:12:20.656Z Open on db.gcve.eu Reference links https://vuldb.com/?id.322053 https://vuldb.com/?ctiid.322053 https://vuldb.com/?submit.640590 https://github.com/i-Corner/cve/issues/18 https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13562`	not_vulnerable	2026-06-08 07:04:32.507760	D-Link DIR-852 gena.cgi command injection HIGH (7.3) A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-11-23T18:02:05.869Z Updated: 2025-11-24T17:50:23.330Z Open on db.gcve.eu Reference links https://vuldb.com/?id.333327 https://vuldb.com/?ctiid.333327 https://vuldb.com/?submit.697063 https://github.com/YZS17/CVE/blob/main/DLink/DLink-DIR852/RCE2.md https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10629`	not_vulnerable	2026-06-08 07:02:27.227758	D-Link DIR-852 Simple Service Discovery Protocol Service cgibin ssdpcgi_main command injection MEDIUM (6.3) A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgi_main of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service. Executing manipulation of the argument ST can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-09-18T00:32:06.706Z Updated: 2025-09-18T13:26:16.353Z Open on db.gcve.eu Reference links https://vuldb.com/?id.324659 https://vuldb.com/?ctiid.324659 https://vuldb.com/?submit.650660 https://github.com/i-Corner/cve/issues/30 https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10628`	not_vulnerable	2026-06-08 07:02:27.227170	D-Link DIR-852 Web Management hedwig.cgi command injection MEDIUM (6.3) A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Management Interface. Performing manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-09-18T00:02:07.068Z Updated: 2025-09-18T13:27:31.867Z Open on db.gcve.eu Reference links https://vuldb.com/?id.324658 https://vuldb.com/?ctiid.324658 https://vuldb.com/?submit.650656 https://github.com/i-Corner/cve/issues/31 https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10093`	not_vulnerable	2026-06-08 07:02:26.287938	D-Link DIR-852 Device Configuration getcfg.php phpcgi_main information disclosure MEDIUM (5.3) A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgi_main of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-09-08T12:02:07.797Z Updated: 2025-09-08T13:11:30.121Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323049 https://vuldb.com/?ctiid.323049 https://vuldb.com/?submit.644935 https://github.com/i-Corner/cve/issues/21 https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.