CVE-2025-52079: High severity D-Link DIR-820L vulnerability
Published Oct 21, 2025
·Updated
The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp.
Affected Software
3 affected components
D-Link DIR-820L
All of the following
Dlink Dir-820l Firmware=1.06b02
Dlink Dir-820l
Event History
Oct 21, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:20 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52079?
CVE-2025-52079 has been assessed with a medium severity due to improper access control allowing potential unauthorized password changes.
2
How do I fix CVE-2025-52079?
To fix CVE-2025-52079, update the D-Link DIR-820L to the latest firmware version that addresses this vulnerability.
3
What are the risks associated with CVE-2025-52079?
The risks associated with CVE-2025-52079 include unauthorized access to the router's settings, potentially leading to further network exploitation.
4
Who is affected by CVE-2025-52079?
Users of the D-Link DIR-820L with firmware version 1.06B02 are affected by CVE-2025-52079.
5
When was CVE-2025-52079 published?
CVE-2025-52079 was published on October 12, 2025.