Details of VAR-202510-2152

ID

VAR-202510-2152

CVE

CVE-2025-52079

TITLE

D-Link DIR-820L Access Control Error Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2025-24726

DESCRIPTION

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp. The D-Link DIR-820L is a wireless router manufactured by D-Link. The D-Link DIR-820L version 1.06B02 contains an improper access control vulnerability. This vulnerability stems from the administrator password setting function failing to properly validate the authentication mechanism

Trust: 1.44

sources: NVD: CVE-2025-52079 // CNVD: CNVD-2025-24726

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-24726

AFFECTED PRODUCTS

vendor:	dlink	model:	dir-820l	scope:	eq	version:	1.06b02	Trust: 1.0
vendor:	d link	model:	dir-820l 1.06b02	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2025-24726 // NVD: CVE-2025-52079

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2025-52079
value:	HIGH
Trust: 1.0
CNVD:	CNVD-2025-24726
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2025-24726
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2025-52079
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: CNVD: CNVD-2025-24726 // NVD: CVE-2025-52079

PROBLEMTYPE DATA

problemtype:

CWE-284

Trust: 1.0

sources: NVD: CVE-2025-52079

EXTERNAL IDS

db:	NVD	id:	CVE-2025-52079	Trust: 1.6
db:	CNVD	id:	CNVD-2025-24726	Trust: 0.6

sources: CNVD: CNVD-2025-24726 // NVD: CVE-2025-52079

REFERENCES

url:	https://www.dlink.com/en/security-bulletin/	Trust: 1.6
url:	https://github.com/namberino/cve/tree/main/cve-2025-52079	Trust: 1.6

sources: CNVD: CNVD-2025-24726 // NVD: CVE-2025-52079

SOURCES

db:	CNVD	id:	CNVD-2025-24726
db:	NVD	id:	CVE-2025-52079

LAST UPDATE DATE

2025-11-19T23:17:53.667000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-24726	date:	2025-10-23T00:00:00
db:	NVD	id:	CVE-2025-52079	date:	2025-11-03T19:00:58.507

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-24726	date:	2025-10-23T00:00:00
db:	NVD	id:	CVE-2025-52079	date:	2025-10-21T20:20:40.347