{"id":"CVE-2020-29557","kind":"vulnerability","aliases":["CVE-2020-29557"],"related":[],"title":"D-Link DIR-825 R1 Devices: D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","description":"An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.","summary":"D-Link DIR-825 R1 routers have a buffer overflow in the web interface. A remote attacker may be able to run code on the device.","severity":"critical","cvss":10.0,"epss":0.5432,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"D-Link DIR-825 R1 Devices","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["d-link","dir-825","exploited","infrastructure","routers","self-hosted"],"not_affected_if":["other-hardware"],"how_to_check":null,"fix":"Apply updates per vendor instructions (D-Link). Specific fixed firmware version: unknown","status":"open","published_at":"2021-01-29T20:15:12+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:33:53+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T21:33:53Z","model":"claude-haiku-5-5","output":{"fix":"Apply updates per vendor instructions (D-Link). Specific fixed firmware version: unknown","reach":"network","impact":"high","summary":"D-Link DIR-825 R1 routers have a buffer overflow in the web interface. A remote attacker may be able to run code on the device.","category":"infrastructure","who_cares":["d-link","dir-825","routers","self-hosted"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Attacker runs code on the router through its web interface","analyst_note":"Find the D-Link advisory and fixed firmware version for DIR-825 R1, and confirm whether the web interface is reachable from WAN by default.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["other-hardware"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000439,"input_tokens":2847,"output_tokens":308,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the D-Link advisory and fixed firmware version for DIR-825 R1, and confirm whether the web interface is reachable from WAN by default.","search":"'-11':85C '-20':86C '-2020':19A,22A '-29557':20A,23A '-825':5A,12A,28A,35B,46B,78C '2020':84C '3.0.1':82C 'abl':62B 'achiev':97C 'allow':94C 'attack':59B,95C 'authent':100C 'buffer':15A,51B,88C 'code':65B,102C 'cve':18A,21A 'd':2A,9A,25A,32B,43B,75C 'd-link':1A,8A,24A,31B,42B,74C 'devic':7A,14A,68B,80C 'devices':30A 'dir':4A,11A,27A,34B,45B,77C 'discov':72C 'execut':103C 'exploit':36B 'host':41B 'infrastructur':37B 'interfac':56B,93C 'issu':70C 'link':3A,10A,26A,33B,44B,76C 'may':60B 'overflow':16A,52B,89C 'pre':99C 'pre-authent':98C 'r1':6A,13A,29A,47B,79C 'remot':58B,101C 'router':38B,48B 'run':64B 'self':40B 'self-host':39B 'vulner':17A 'web':55B,92C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-01-29T20:15:12+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-29557","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-29557","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T10:39:08+00:00","note":null},{"source":"epss","external_id":"CVE-2020-29557","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-29557","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-29557","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29557","severity":null,"published_at":"2021-01-29T20:15:12+00:00","modified_at":"2026-06-17T03:11:25+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}