Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-825m_firmware:1.1.12:*:*:*:*:*:*:*

part: o version: 1.1.12 update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 825M Firmware (b7e90382-c8e7-5311-af50-75bb9067a42c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7289 vulnerable 2026-06-08 08:08:56.802189 D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow
HIGH (8.8)
A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2026-04-28T15:01:35.844Z
Updated: 2026-04-29T15:03:14.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7288 vulnerable 2026-06-08 08:08:56.800550 D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflow
HIGH (8.8)
A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Published: 2026-04-28T14:46:16.429Z
Updated: 2026-04-29T14:24:38.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13306 vulnerable 2026-06-08 07:04:31.981870 D-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injection
MEDIUM (6.3)
A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Published: 2025-11-17T23:32:06.249Z
Updated: 2025-11-18T16:36:07.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.