CVE-2025-10093

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-10093
A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgi_main of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://github.com/i-Corner/cve/issues/21 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.323049 Permissions Required VDB Entry
https://vuldb.com/?id.323049 Third Party Advisory VDB Entry
https://vuldb.com/?submit.644935 Third Party Advisory VDB Entry
https://www.dlink.com/ Product
https://github.com/i-Corner/cve/issues/21 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-852_firmware:1.00cn_b09:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-852:-:*:*:*:*:*:*:*
History

29 Sep 2025, 18:27

Type Values Removed Values Added
First Time Dlink
Dlink dir-852 Firmware
Dlink dir-852
References () https://github.com/i-Corner/cve/issues/21 - () https://github.com/i-Corner/cve/issues/21 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.323049 - () https://vuldb.com/?ctiid.323049 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.323049 - () https://vuldb.com/?id.323049 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.644935 - () https://vuldb.com/?submit.644935 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
CPE cpe:2.3:h:dlink:dir-852:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-852_firmware:1.00cn_b09:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

08 Sep 2025, 13:15

Type Values Removed Values Added
References () https://github.com/i-Corner/cve/issues/21 - () https://github.com/i-Corner/cve/issues/21 -

08 Sep 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-08 12:15

Updated : 2025-09-29 18:27

NVD link : CVE-2025-10093

Mitre link : CVE-2025-10093

CVE.ORG link : CVE-2025-10093

JSON object : View

Products Affected

dlink

  • dir-852_firmware
  • dir-852
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control

NVD-CWE-noinfo