{"cvss":0.0,"datePublished":"2023-11-14T00:00:00Z","dateUpdated":"2023-11-14T00:00:00Z","description":"In the \"webupg\" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters \"autoupgrade.asp\", and perform functions such as downloading configuration files and updating firmware without authorization.","dueDate":"","id":"CVE-2021-46442","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"DIR-825 R1 Devices","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"D-Link DIR-825 R1 Devices Improper Authentication","vendor":"D-Link"}