D-Link DIR-825 Router
From Wiki-IoT
Revision as of 13:52, 27 September 2025 by Yu (talk | contribs) (Created page with "{{Classification |name=D-Link DIR-825 AC1200 Gigabit Router |brand=D-Link |parent_company=D-Link Corporation |website=https://www.dlink.com/-/media/consumer_products/dir/dir-8...")
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| D-Link DIR-825 Router | ||
|---|---|---|
|
Security Grade
Calculator v
|
D-Link DIR-825 AC1200 Gigabit Router
Brand: D-Link (Parent: D-Link Corporation) Category: Dual-band Wi-Fi gigabit router • Model / Gen: HW B1 / v3 DIR-825 (B1, R2, AC1200) Release Date: 2017-04-05 • Status: In sale Classification Date: • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Very common | 🔗 Proof | UART pins unpopulated but labelled; case snaps open without tools |
| Known vulnerabilities | Very common | 🔗 Proof | Remote code exec via /cgi-bin/ scripts |
| Prior attacks | Very common | 🔗 Proof | Multiple botnets (Mirai variants) exploit DIR-825 R2 |
| Updatability | Rare | 🔗 Proof | Last firmware 2021-09; no automatic update channel; regional images only |
| Category Score | Score: 3 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | HTTP basic auth; no 2FA, no certificate login |
| Communications | Encrypted with obselete encryption | 🔗 Proof | HTTPS uses TLS 1.1, weak ciphers, self-signed cert |
| Storage | No encryption | 🔗 Proof | SPI flash dumped in plaintext; config file readable |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | One admin, one guest account; no RBAC |
| Authentication | Basic | 🔗 Proof | Single admin account; no 2FA |
| Brute-force protection | Absent | 🔗 Proof | No lock-out, no captcha, unlimited login attempts |
| Event logging | Partial logging | 🔗 Proof | Web UI shows DHCP & port-forward events; no syslog export, no failed-auth log |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Factory admin/admin; no forced change, no complexity rules |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Linux-based D-Link SDK (VxWorks on early units) (Companion App: D-Link Wi-Fi (iOS/Android) or Web UI only) |
| Hardware (CPU / GPU) | CPU: Realtek RTL8198D MIPS32 24 K @ 660 MHz • GPU: None |
| Memory & Storage | Memory: 64 MB DDR2 • Storage: 8 MB SPI NOR flash |
| Power, Battery & Charging | Battery: None • Power: 12 V ⎓ 1.5 A external adapter • Charging: Barrel connector (no battery) |
| Display & Camera | Display: 9 × LED (Power, WAN, LAN, Wi-Fi, WPS, USB) • Camera: None |
| Sound & Connectivity | Sound: None • Connectivity: Wi-Fi 5 (802.11ac) 2×2 MU-MIMO, 2.4 GHz 300 Mbps + 5 GHz 867 Mbps; 5× GbE (1× WAN + 4× LAN); USB 2.0; no Bluetooth |
| Physical (Dimensions & Mass) | Dimensions: 177 × 139 × 50 mm • Mass: 250 g |
