CVE-2021-46442 | BDVDB-2026-174865 Detail

Description#

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.dlink.com/en/security-bulletin/
https://github.com/tgp-top/D-Link-DIR-825

Exploit#

No public exploit known

History#

Version 12022-04-27Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.