CVE-2025-10093

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-10093
A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgi_main of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://github.com/i-Corner/cve/issues/21 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.323049 Permissions Required VDB Entry
https://vuldb.com/?id.323049 Third Party Advisory VDB Entry
https://vuldb.com/?submit.644935 Third Party Advisory VDB Entry
https://www.dlink.com/ Product
https://github.com/i-Corner/cve/issues/21 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-852_firmware:1.00cn_b09:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-852:-:*:*:*:*:*:*:*
History

29 Sep 2025, 18:27

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:dlink:dir-852_firmware:1.00cn_b09:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-852:-:*:*:*:*:*:*:*
First Time Dlink dir-852 Firmware
Dlink dir-852
Dlink
References () https://github.com/i-Corner/cve/issues/21 - () https://github.com/i-Corner/cve/issues/21 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.323049 - () https://vuldb.com/?ctiid.323049 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.323049 - () https://vuldb.com/?id.323049 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.644935 - () https://vuldb.com/?submit.644935 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product

08 Sep 2025, 13:15

Type Values Removed Values Added
References () https://github.com/i-Corner/cve/issues/21 - () https://github.com/i-Corner/cve/issues/21 -

08 Sep 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-08 12:15

Updated : 2025-09-29 18:27

NVD link : CVE-2025-10093

Mitre link : CVE-2025-10093

CVE.ORG link : CVE-2025-10093

JSON object : View

Products Affected

dlink

  • dir-852
  • dir-852_firmware
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control

NVD-CWE-noinfo