Is the D-Link DIR-825 still getting security updates?
The D-Link DIR-825 stopped receiving security updates on 1 September 2015. New vulnerabilities will not be fixed.
The date after which a device gets no more security fixes is also called its end of life (EOL) or end of support.
Security updates ended on
1 September 2015to 1 January 2016What to do. Attackers are using known flaws in this model. Replace it. Until then, turn off remote administration and UPnP, and keep it off the Internet.
Vulnerabilities attackers are using
The U.S. cybersecurity agency (CISA) lists these vulnerabilities as actively exploited. Its description names the affected hardware versions when they are known.
- CVE-2020-29557: D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution.
Support timeline
By hardware version
Dates differ between hardware versions and sometimes between markets. The version is on the label under the device.
| Hardware version | Status | Security updates until | Basis | Source |
|---|---|---|---|---|
| All versions | Unsupported | 1 September 2015 | Official end date published by the manufacturer. | United States |
| B | Unsupported | 1 January 2016 | Official end date published by the manufacturer. | Worldwide |
Questions
Is the D-Link DIR-825 still getting security updates?
The D-Link DIR-825 stopped receiving security updates on 1 September 2015. New vulnerabilities will not be fixed.
Is the D-Link DIR-825 affected by vulnerabilities attackers are using?
Yes. The CISA catalogue of exploited vulnerabilities lists CVE-2020-29557 for this model. Check the affected hardware versions and install the latest firmware, or replace the device if it is no longer supported.
What does end of life mean for the D-Link DIR-825?
After its end of life, the D-Link DIR-825 receives no more security fixes from D-Link. It keeps working, but any vulnerability found later stays open, which makes it an easy target once attackers know about it.
Where does this date come from?
From the manufacturer: D-Link | Legacy Products (Model / Last Day of Support); D-Link Security Announcement SAP10341: DIR-825 :: All H/W Revisions :: All F/W Version :: End-of-Life / End-of-Service :: Reported Security Vulnerability. Each date is shown exactly as published.
Other D-Link routers
- DGL-3420ended 1 May 2012 Unsupported
- DGL-4100ended 5 November 2012 Unsupported
- DGL-4300ended 1 July 2010 Unsupported
- DGL-4500ended 5 May 2013 Unsupported
- DGL-5500ended 1 November 2017 Unsupported
- DI-514ended 1 August 2007 Unsupported
- DI-524ended 1 January 2009 Unsupported
- DI-604ended 1 June 2008 Unsupported
- DI-604UPended 29 December 2013 Unsupported
- DI-614+ended 1 March 2008 Unsupported
- DI-624ended 1 August 2010 Unsupported
- DI-624Mended 1 June 2008 Unsupported