BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-11-03

Assigner: MITRE

Description

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-21

Last Modified

2025-11-03

Generated

2026-07-06

AI Q&A

2025-10-21

EPSS Evaluated

2026-07-05

NVD

CVE-2025-52079

Affected Vendors & Products

Vendor	Product	Version / Range
dlink	dir-820l_firmware	1.06b02
dlink	dir-820l	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability in the D-Link DIR-820L 1.06B02 involves improper access control that allows an attacker to change the administrator password without verification by sending a specially crafted POST request to the /get_set.ccp endpoint.

Impact Analysis

An attacker exploiting this vulnerability could change the administrator password without authorization, potentially gaining full control over the device, leading to unauthorized access, configuration changes, and compromise of network security.

Hi! I’m here to help you understand CVE-2025-52079. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70