CVEブラウザに戻る

CVE-2020-29557

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score42.4000%

EPSS Percentile98.49th

Published2021-01-29

Last Modified2025-11-07

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.

Affected Platforms (CPE)

💻

Dlink

Dir 825 R1 Firmware

<= 3.0.1

References & Advisories

🔗 https://shaqed.github.io/dlink/

🔗 https://www.dlink.ru/ru/download2/5/19/2354/441/

🔗 https://shaqed.github.io/dlink/

🔗 https://www.dlink.ru/ru/download2/5/19/2354/441/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-29557

関連する脆弱性情報

CVE-2026-6742910.0

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing...

CVE-2026-167718.8

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-b...

CVE-2026-120015.2

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6...

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...