CVE-2025-10629

The CVE-2025-10629 affects D-Link DIR-852 (firmware 1.00CN B09) in the Simple Service Discovery Protocol Service, specifically the ssdpcgi_main function in htodcs/cgibin. The vulnerability arises from insufficient input filtering of the ST argument, enabling command injection and potential remote...

CVE-2025-10628

D-Link DIR-852 (1.00CN B09) Web Management Interface component /htdocs/cgibin/hedwig.cgi is affected by a command-injection vulnerability. The issue arises from insufficient input filtering in hedwig.cgi, enabling remote exploitation. Public exploits exist and the affected devices are noted as no...

CVE-2025-13562

The CVE-2025-13562 entry concerns D-Link DIR-852 (firmware 1.00). The vulnerability arises from processing the /gena.cgi file where manipulation of the service argument enables command injection, allowing remote execution. Public exploit information exists. Affected devices are described as no lo...

CVE-2025-10093

CVE-2025-10093 affects the D-Link DIR-852 (up to 1.00CN B09), targeting the Device Configuration Handler, specifically the function phpcgi_main in the file /getcfg.php . The vulnerability allows remote manipulation that leads to information disclosure . The issue is exploitable over the network w...

CVE-2025-9752

CVE-2025-9752 affects D-Link DIR-852 with firmware 1.00CN B09 in the SOAP Service’s soap.cgi, specifically the soapcgi_main function. A manipulation of the argument named in the soap.cgi service parameter leads to OS command injection. The vulnerability is exploitable remotely and has publicly di...