Skip to content
OpenAdvisories

Product · D-Link

DIR-825

17 known vulnerabilities.

DIR-825 at a glance

Last 12 months
4
Critical · all time
2
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 2 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability, 1 critical Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202611
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202620
Mar 202610
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202520
Aug 202510
Jul 202511
Jun 202520
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

17 results · Feed

  • Critical 9.8

    D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

    A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname  leads to out-of-bounds write. The attack may be initiated remot…

  • High 8.0

    D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow

    A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argument NewPortMappingDescription results in buffer overflow. Th…

  • High 8.8

    D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow

    A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such manipulation leads to buffer overflow. The attack can only be initiated within the local network. The exploit is…

  • High 7.2

    D-Link DIR-825/DIR-825R NTP Service libdeuteron_modules.so handler_update_system_time os command injection

    A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuteron_modules.so of the component NTP Service. The manipulation results in os command injection. The attack may be laun…

  • High 8.8
    CVE-2025-10666 Public exploit

    D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow

    A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely.…

  • High 8.8

    D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow

    A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function get_ping6_app_stat of the file ping6_response.cg of the component httpd. Performing manipulation of the argument ping6_ipaddr results in buffer overflow. It is possible to initiate…

  • High 7.2

    D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow

    A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function get_ping_app_stat of the file ping_response.cgi of the component httpd. The manipulation of the argument ping_ipaddr leads to stack-based buffer overflow. Th…

  • Critical 9.8
    CVE-2025-7206 EPSS 22%

    D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow

    A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub_410DDC of the file switch_language.cgi of the component httpd. The manipulation of the argument Language leads to stack-based buffer …

  • High 8.8

    D-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflow

    A vulnerability has been found in D-Link DIR-825 2.03 and classified as critical. This vulnerability affects the function sub_4091AC of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated…

  • High 8.8

    D-Link DIR-825 HTTP POST Request do_file stack-based overflow

    A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function do_file of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack rem…

  • Medium 5.3
    CVE-2024-0717 EPSS 18%

    D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

    A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, D…

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…