Description
A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | DIR-825 | 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS) EDB-52469 · hardware · Feb 2, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2025-2102 D-LINK Router: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Sep 21, 2025
References
- VDB-324787 | D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow vdb-entry technical-description
- VDB-324787 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #652047 | D-Link DIR-825 Rev.B 2.10 Buffer Overflow third-party-advisory
- https://github.com/panda666-888/vuls/blob/main/d-link/dir-825/apply.cgi.md related
- https://github.com/panda666-888/vuls/blob/main/d-link/dir-825/apply.cgi.md#poc exploit
- https://www.dlink.com/ product