PT-2025-36373 · D Link · Dir-825

Jason J · Published 2025-09-06 · Updated 2025-09-07 · CVE-2025-10034

Positive Technologies · (AI Summary)

CVSS v2.0

9.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions:

D-Link DIR-825 version 1.08.01

Description:

A buffer overflow issue exists in the `httpd` component of D-Link DIR-825. The `get ping6 app stat` function within the `ping6 response.cg` file is affected. Manipulation of the `ping6 ipaddr` argument can trigger the overflow. This issue can be exploited remotely. The exploit has been made public. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2025-10034

Affected Products

Dir-825

References · 10

• 🔥 https://github.com/Jjx-wy/D-Link/blob/main/D-Link%20DIR-825%202.10.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10034 · Security Note
• https://twitter.com/dpharristech/status/1964690214795780478 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1964352561042846000 · Twitter Post
• https://vuldb.com/?id.322750 · Note
• https://twitter.com/RedPacketSec/status/1964414126307885359 · Twitter Post
• https://vuldb.com/?submit.643978 · Note
• https://dlink.com · Note
• https://vuldb.com/?ctiid.322750 · Note
• https://twitter.com/CVEnew/status/1964379893073920077 · Twitter Post