D-Link DIR-825 Firmware 2.10
Approved changes feed: RSS · Atom
cpe:2.3:o:dlink:dir-825_firmware:2.10:*:*:*:*:*:*:*
part: o version: 2.10 update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dir 825 Firmware (4081a202-66ca-5f24-b905-15ec5378fe01) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8949 |
vulnerable | 2026-06-08 07:45:21.493414 |
D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow
HIGH (7.2)
A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function get_ping_app_stat of the file ping_response.cgi of the component httpd. The manipulation of the argument ping_ipaddr leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-08-14T07:02:09.338Z
Updated: 2025-08-14T19:40:07.439Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7206 |
vulnerable | 2026-06-08 07:43:18.147979 |
D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow
CRITICAL (9.8)
A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub_410DDC of the file switch_language.cgi of the component httpd. The manipulation of the argument Language leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-07-08T23:32:06.224Z
Updated: 2025-07-09T13:14:14.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10216 |
vulnerable | 2026-06-08 05:16:34.887750 |
Details available
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.
Published: 2020-03-07T00:29:54.000Z
Updated: 2024-08-04T10:58:39.450Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10215 |
vulnerable | 2026-06-08 05:16:34.887352 |
Details available
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.
Published: 2020-03-07T00:30:05.000Z
Updated: 2024-08-04T10:58:40.280Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10214 |
vulnerable | 2026-06-08 05:16:34.886961 |
Details available
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server.
Published: 2020-03-07T00:30:13.000Z
Updated: 2024-08-04T10:58:40.116Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10213 |
vulnerable | 2026-06-08 05:16:34.884778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.