PT-2025-33133 · D Link · D-Link Dir-825

Ic0Rner · Published 2025-08-03 · Updated 2025-08-18 · CVE-2025-8949

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 2.10

Description: A vulnerability exists in the httpd component of D-Link DIR-825 version 2.10. The vulnerability is located in the get ping app stat function within the ping response.cgi file. Manipulation of the ping ipaddr argument can lead to a stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability affects products that are no longer supported by the manufacturer.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-10683

CVE-2025-8949

Affected Products

D-Link Dir-825

References · 13

• 🔥 https://github.com/i-Corner/cve/issues/16 · Exploit
• https://osv.dev/vulnerability/CVE-2025-8949 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10683 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8949 · Security Note
• https://t.me/cveNotify/132658 · Telegram Post
• https://t.me/cveNotify/132212 · Telegram Post
• https://twitter.com/CVEnew/status/1955900272443842817 · Twitter Post
• https://t.me/CVEtracker/29974 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1955897778959208489 · Twitter Post
• https://vuldb.com/?submit.627640 · Note
• https://vuldb.com/?ctiid.319915 · Note
• https://dlink.com · Note
• https://vuldb.com/?id.319915 · Note