Skip to content
OpenAdvisories

Product · D-Link

DIR-852

6 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.3

    D-Link DIR-852 Simple Service Discovery Protocol Service cgibin ssdpcgi_main command injection

    A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgi_main of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service. Executing manipulation of the argument ST can lead to command injec…

  • Medium 6.3
    CVE-2025-10628 EPSS 10%

    D-Link DIR-852 Web Management hedwig.cgi command injection

    A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Management Interface. Performing manipulation results in command injection. The attack is possible to be…

  • Medium 5.3

    D-Link DIR-852 Device Configuration getcfg.php phpcgi_main information disclosure

    A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgi_main of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack …