CVE-2020-29557criticalunder attackCWE-119

CVE-2020-29557

Published · Updated

Follow this CVE+ Monitor DIR-825 R1 Devices

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

70Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 56%
from disclosure to weapon
Published on NVDJan 29
CISA KEV+278d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A buffer overflow vulnerability in D-Link DIR-825 R1's web interface allows attackers to run malicious code on the router without needing to log in first. This is critical because anyone on the internet can potentially take control of your router.

Technical detail

A stack-based buffer overflow exists in the web interface of D-Link DIR-825 R1 (firmware ≤3.0.1) accessible pre-authentication. The vulnerability allows remote attackers to overflow a buffer and achieve arbitrary code execution with router privileges via a crafted HTTP request. Affected versions lack proper input validation on web parameters.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a