CVE-2021-46442: D-Link DIR-825 Firmware

Critical severity, CVSS 9.8. EPSS: 56.1% chance of exploitation in the next 30 days.

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization.

Affected products

• D-Link DIR-825 Firmware: affected versions not specified

Published 2022-04-27. Last modified 2026-06-17.