# CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.

- Page: https://www.vulneraibility.com/cve/CVE-2020-29557
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2021-11-03; CISA due date 2022-05-03
- EPSS: 55.75% (percentile 99.1)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-02-07)
- Weakness: CWE-119
- Published: 2021-01-29

## Affected

- dlink:dir-825_r1_firmware

## References

- [other] https://www.dlink.ru/ru/download2/5/19/2354/441/
- [other] https://shaqed.github.io/dlink/
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-29557

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.