GCVE - cpe:2.3:o:dlink:dir-825_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-825_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 825 Firmware (`4081a202-66ca-5f24-b905-15ec5378fe01`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-46442`	vulnerable	2026-06-08 05:38:03.384413	Details available In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization. Published: 2022-04-27T10:10:37.000Z Updated: 2024-08-04T05:10:33.818Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/tgp-top/D-Link-DIR-825	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46441`	vulnerable	2026-06-08 05:38:03.383072	Details available In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization. Published: 2022-04-27T10:12:38.000Z Updated: 2024-08-04T05:02:11.786Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/tgp-top/D-Link-DIR-825	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16920`	vulnerable	2026-06-08 05:13:09.602918	Details available Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825. Published: 2019-09-27T11:34:12.000Z Updated: 2025-10-21T23:45:29.886Z Open on db.gcve.eu Reference links https://fortiguard.com/zeroday/FG-VD-19-117 https://www.seebug.org/vuldb/ssvid-98079 https://medium.com/%4080vul/determine-the-device-model-affected-by-cve-2019-16920-by-zoomeye-bf6fec7f9bb3 https://www.kb.cert.org/vuls/id/766427	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.