Security Advisory

CVE-2021-46442

9.8
CRITICAL

Vulnerability Description

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization.
Published Date April 27, 2022
Official Source NIST NVD Advisory