Dir-825/ac Firmware vulnerabilities

6 known vulnerabilities in Dir-825/ac Firmware from D-Link. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DIR-825: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-43647Mar 29, 2023D-Link

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which

• 8.8 High severity

  DIR-825: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-43646Mar 29, 2023D-Link

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vimeo plugin for the

• 8.8 High severity

  DIR-825: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-43645Mar 29, 2023D-Link

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IVI plugin for the xu

• 8.8 High severity

  DIR-825: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-43644Mar 29, 2023D-Link

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for t

• 8.8 High severity

  DIR-825: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-43643Mar 29, 2023D-LinkEPSS 1.92%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for th

• 8.8 High severity

  DIR-825: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-43642Mar 29, 2023D-Link

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the YouTube plugin for th