Vulnerability · Published Sep 18, 2025 · Assigned by VulDB
CVE-2025-10666D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow
High 8.8
In plain English
A high-severity buffer overflow in DIR-825 from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.4% (higher than 89% of all known vulnerabilities).
Official description
A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products (as reported)
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-324787 | D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow vdb-entry, technical-description
- VDB-324787 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #652047 | D-Link DIR-825 Rev.B 2.10 Buffer Overflow third-party-advisory
- https://github.com/panda666-888/vuls/blob/main/d-link/dir-825/apply.cgi.md related
- https://github.com/panda666-888/vuls/blob/main/d-link/dir-825/apply.cgi.md#poc exploit
- https://www.dlink.com/ product
- https://www.exploit-db.com/exploits/52469