CVE-2025-13562: D-Link DIR-852 gena.cgi command injection

Published Nov 23, 2025

Updated

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

3 affected components

D-Link DIR-852

All of the following

Dlink Dir-852 Firmware=1.00

Dlink Dir-852

Event History

Nov 23, 2025

CVE Published

via MITRE·06:02 PM

Data Sourced

via MITRE·06:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13562?

CVE-2025-13562 is classified as a high severity vulnerability due to its potential for remote command injection.

How do I fix CVE-2025-13562?

To mitigate CVE-2025-13562, it is recommended to apply the latest firmware updates provided by D-Link for the DIR-852 router.

What systems are affected by CVE-2025-13562?

CVE-2025-13562 specifically affects the D-Link DIR-852 router with firmware version 1.00.

Can CVE-2025-13562 be exploited remotely?

Yes, CVE-2025-13562 can be exploited remotely, allowing attackers to execute commands on the affected system.

Are there any known exploits for CVE-2025-13562?

Yes, there are publicly available exploits for CVE-2025-13562 that could be utilized by attackers.