CVE-2019-9123

CVE-2019-9123 affects D-Link DIR-825 Rev.B 2.10 devices. The issue is an empty password on the 'user' account, enabling remote login over the network. Impact described in sources includes unauthorized access with network vector and high/critical severity. Remediation in the documents includes cha...

CVE-2019-9122

The CVE-2019-9122 issue affects D-Link DIR-825 Rev.B firmware 2.10. An input validation flaw in the ntp_sync.cgi endpoint allows a remote attacker to pass ntp_server in a POST request to execute arbitrary commands, giving remote code execution with high impact (C/H/I/H) per CVSS 3.1. Exploitation...

CVE-2019-9122

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntpserver parameter in an ntpsync.cgi POST request...

CVE-2019-9126

CVE-2019-9126 affects D-Link DIR-825 Rev.B 2.10 devices. The vulnerability is an information disclosure through requests to the router_info.xml document, leading to exposure of the device’s PIN code, MAC address, routing table, firmware version, update time, QoS and other LAN/WLAN information. Th...

D-Link DIR-825 "user" Account Empty Password Vulnerability

The D-Link DIR-825 is a router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-825 B version 2.10, which stems from the use of an empty password for the 'user' account. The vulnerability can be exploited by an attacker to log into the router...

PT-2019-6345 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 versions 2.10 Description: The issue is related to the use of weak password requirements in the D-Link DIR-825 router's firmware. This can allow a remote attacker to impact the confidentiality, integrity, and availability of...

PT-2019-6348 · D Link · Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 versions 2.10 Description: The issue is related to a lack of protection for service data, which can be exploited by a remote attacker to disclose protected information by requesting the router info.xml document. This can reveal...

CVE-2019-9123: Weak Password Requirements

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password...

CVE-2019-9126: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the routerinfo.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN...

CVE-2019-9122: Undefined Security Weakness

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntpserver parameter in an ntpsync.cgi POST request...

D-Link DIR-825 has multiple vulnerabilities

D-Link DIR-825 is a wireless router product from AUO D-Link. A buffer overflow vulnerability and a directory traversal vulnerability exist in the D-Link DIR-825. An attacker can exploit these vulnerabilities to execute arbitrary code in the affected device, obtain sensitive information, and...

D-Link DIR-825 (vC) - Multiple Vulnerabilities

Advisory Information Title: DIR-825 vC Buffer overflows in authentication,HNAP and ping functionalities. Also a directory traversal issue exists which can be exploited Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been...