The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp.
References
| Link | Resource |
|---|---|
| https://github.com/namberino/cve/tree/main/CVE-2025-52079 | Exploit Third Party Advisory |
| https://www.dlink.com/en/security-bulletin/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Nov 2025, 19:00
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:dlink:dir-820l_firmware:1.06b02:*:*:*:*:*:*:* |
28 Oct 2025, 19:07
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-820l_firmware:1.06:b02:*:*:*:*:*:* |
|
| First Time |
Dlink
Dlink dir-820l Dlink dir-820l Firmware |
|
| References | () https://github.com/namberino/cve/tree/main/CVE-2025-52079 - Exploit, Third Party Advisory | |
| References | () https://www.dlink.com/en/security-bulletin/ - Vendor Advisory |
22 Oct 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
21 Oct 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
21 Oct 2025, 20:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-21 20:20
Updated : 2025-11-03 19:00
NVD link : CVE-2025-52079
Mitre link : CVE-2025-52079
CVE.ORG link : CVE-2025-52079
JSON object : View
Products Affected
dlink
- dir-820l
- dir-820l_firmware
CWE
CWE-284
Improper Access Control