D-Link Dir-825/ac Firmware vulnerabilities

6 CVEs affecting D-Link Dir-825/ac Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43647, published 2023-03-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-43643, published 2023-03-29. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this…
CVE-2022-43647, published 2023-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this…
CVE-2022-43646, published 2023-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this…
CVE-2022-43645, published 2023-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this…
CVE-2022-43644, published 2023-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this…
CVE-2022-43642, published 2023-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this…