Router
HardwareC1 · Atheros AR9344 / Atheros AR9382 Wi-Fi
Replace router software with a customizable system for network controls and community packages.
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
Check the project and hardware shown for each feature.
d-link dir-825 c1 — device documentation (github.com)D-Link DIR-825 rev C1 — TechInfoDepot (github.com)D-Link DIR-825 rev C1 — WikiDevi (github.com)
OpenWrt · B1 / B2 · 2x Atheros AR922x Wi-Fi — Source documentation (openwrt.org)
OpenWrt · C1 · Atheros AR9344 / Atheros AR9382 Wi-Fi — Source documentation (openwrt.org)
C1 · Atheros AR9344 / Atheros AR9382 Wi-Fi — Source documentation (openwrt.org)
Saved scan
From our saved security research.
Prioritized by known exploitation, severity, then date.
D-Link DIR-825
An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.
D-Link DIR-825
Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.
D-Link DIR-825
DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wps_pin" passed to the apc_client_pin.cgi binary through a POST request.
D-Link DIR-825
Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint.
DIR-825
A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname leads to out-of-bounds write. The attack may be initiated remotely.
