CVE-2025-10666: D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow
A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub4106d4 of the file apply.cgi. The manipulation of the argument countdowntime results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10666?
CVE-2025-10666 is classified as a buffer overflow vulnerability that can be exploited remotely.
How do I fix CVE-2025-10666?
To fix CVE-2025-10666, upgrade the D-Link DIR-825 firmware to version 2.11 or later.
What is affected by CVE-2025-10666?
CVE-2025-10666 affects D-Link DIR-825 devices running firmware version up to and including 2.10.
How does CVE-2025-10666 work?
CVE-2025-10666 allows an attacker to manipulate the countdown_time argument in apply.cgi, leading to a buffer overflow.
Can CVE-2025-10666 be exploited remotely?
Yes, CVE-2025-10666 can be exploited remotely, making it a serious security risk.