critical9.8Known exploited
CVE-2020-29557
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Impact
An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-825 R1 Firmware | through 3.0.1 |