CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-29557
Critical (9.8) in D-Link DIR-825 R1 Devices. In CISA KEV since 2021-11-03. EPSS 56% chance of exploitation in the next 30 days.
An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.
Severity
- EPSS
- 56% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2021-11-03, due 2022-05-03
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dlink:dir-825_r1_firmware