CVE-2025-10093: D-Link DIR-852 Device Configuration getcfg.php phpcgi_main information disclosure
A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgimain of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10093?
CVE-2025-10093 has a medium severity rating due to the potential for information disclosure.
How do I fix CVE-2025-10093?
To fix CVE-2025-10093, upgrade the D-Link DIR-852 to a version later than 1.00CN B09.
What type of vulnerability is CVE-2025-10093?
CVE-2025-10093 is classified as an information disclosure vulnerability.
What software is affected by CVE-2025-10093?
CVE-2025-10093 affects the D-Link DIR-852 router running version 1.00CN B09 or earlier.
Can CVE-2025-10093 be exploited remotely?
Yes, CVE-2025-10093 can be exploited remotely without physical access to the device.