D-Link DIR-825 Wi-Fi Router
From Wiki-IoT
Revision as of 07:23, 24 October 2026 by Sunweijun (talk | contribs) (Created page with "{| class="wikitable" ! Device Name | D-Link DIR-825 Wi-Fi Router |- ! Brand | D-Link |- ! Type | Home / Small Office Router |- ! Released | 2010 |- ! Current Firmware | 1.xx (...")
| Device Name | D-Link DIR-825 Wi-Fi Router |
|---|---|
| Brand | D-Link |
| Type | Home / Small Office Router |
| Released | 2010 |
| Current Firmware | 1.xx (discontinued updates) |
Device Category
| Criterion | Score | Justification |
|---|---|---|
| Known hardware tampering | 2 (Rare) | Basic physical security. UART ports exposed on the PCB allow firmware extraction with basic tools. No tamper detection. Proof |
| Known vulnerabilities | 3 (Very common) | Hundreds of CVEs documented, including unauthenticated remote code execution. CVE-2018-10561 and CVE-2018-10562 are critical flaws actively exploited in the wild. CVE-2018-10561, CVE-2018-10562 |
| Prior attacks | 3 (Very common) | Primary target of Mirai botnet. Default credentials "admin" / "" (empty password) were in Mirai's built-in password list, infecting hundreds of thousands of units. Mirai Botnet Target List |
| Updatability | 3 (None) | D-Link has discontinued firmware updates for all DIR-825 hardware revisions. Known vulnerabilities remain unpatched on devices still in active use. Router Vulnerability Report |
Device Category Score: 3
System Category
| Criterion | Score | Justification |
|---|---|---|
| Authentication with other systems | 2 (Partial) | Web management interface requires password, but remote management is often enabled by default and exposed directly to the internet. Router Security Analysis |
| Communications | 2 (Encrypted with obsolete encryption) | HTTPS supported but uses outdated TLS 1.0/1.1 with weak ciphers. Most admin pages served over plain HTTP by default. IoT Security Statistics 2026 |
| Storage | 3 (Not encrypted) | Configuration files, admin passwords, and Wi-Fi keys stored in flash memory without encryption. Physical access allows full credential extraction. Router Firmware Research |
System Category Score: 3
User Authentication Category
| Criterion | Score | Justification |
|---|---|---|
| Account management | 2 (Basic) | Single admin account only. No role-based access control, no multi-user support. Bitdefender IoT Report 2025 |
| Authentication | 2 (Basic) | Password authentication only. No two-factor authentication support. Default credentials widely known. Default Credentials Study |
| Brute-force protection | 3 (Absent) | No rate limiting or account lockout after failed login attempts. Brute-force attacks are trivial and automated. CNCERT IoT Report |
| Event logging | 2 (Partial logging) | Basic system logs available but do not record detailed authentication events or admin action history. Logging Analysis |
| Passwords | 3 (Default, common, easy to guess) | Default credentials "admin" with empty password shipped on many units. Users are not forced to change default passwords during initial setup. Default Password List |
User Authentication Category Score: 3
Final Grade
GRAS Total: 9
Final Grade: F (Highest Danger Level)
