Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-825m:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 825M (444008a4-edae-56de-b39b-6d31d5bff563)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7289 not_vulnerable 2026-06-08 08:08:56.802218 D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow
HIGH (8.8)
A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2026-04-28T15:01:35.844Z
Updated: 2026-04-29T15:03:14.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7288 not_vulnerable 2026-06-08 08:08:56.801524 D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflow
HIGH (8.8)
A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Published: 2026-04-28T14:46:16.429Z
Updated: 2026-04-29T14:24:38.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13306 not_vulnerable 2026-06-08 07:04:31.981917 D-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injection
MEDIUM (6.3)
A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Published: 2025-11-17T23:32:06.249Z
Updated: 2025-11-18T16:36:07.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13305 not_vulnerable 2026-06-08 07:04:31.962712 D-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflow
HIGH (8.8)
A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-11-17T23:02:06.147Z
Updated: 2025-11-18T14:41:07.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13304 not_vulnerable 2026-06-08 07:04:31.948157 D-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow
HIGH (8.8)
A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Published: 2025-11-17T22:32:07.051Z
Updated: 2025-11-18T16:36:42.638Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.