Skip to content
OpenAdvisories
High WID-SEC-2025-2671 10 CVEs

D-LINK Router: Mehrere Schwachstellen

Published Nov 24, 2025 · Updated Nov 24, 2025 · de-DE

Vendor: D-Link Product: Router

Summary

Ein Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 10

  • High 8.8
    CVE-2025-13304

    D-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow

    A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer…

    D-Link DWR-M960 DWR-M961 DWR-M920 Network devices
  • High 8.8
    CVE-2025-13305

    D-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflow

    A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer ov…

    D-Link DWR-M960 DWR-M920 DWR-M921 Network devices
  • High 8.8
    CVE-2025-13547

    D-Link DIR-822K/DWR-M920 formDdns memory corruption

    A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The explo…

    D-Link DWR-M920 DIR-822K Network devices
  • High 8.8
    CVE-2025-13548

    D-Link DIR-822K/DWR-M920 formFirewallAdv buffer overflow

    A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be la…

    D-Link DWR-M920 DIR-822K Network devices
  • High 8.8
    CVE-2025-13549

    D-Link DIR-822K formNtp sub_455524 buffer overflow

    A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer overflow. Remote exploitation of the attack is possible. The exploi…

    D-Link DIR-822K Network devices
  • High 8.8
    CVE-2025-13550

    D-Link DIR-822K/DWR-M920 formVpnConfigSetup buffer overflow

    A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be…

    D-Link DWR-M920 DIR-822K Network devices
  • High 8.8
    CVE-2025-13551

    D-Link DIR-822K/DWR-M920 formWanConfigSetup buffer overflow

    A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. The attack is …

    D-Link DWR-M920 DIR-822K Network devices
  • High 8.8
    CVE-2025-13552

    D-Link DIR-822K/DWR-M920 formWlEncrypt buffer overflow

    A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack m…

    D-Link DWR-M920 DIR-822K Network devices
  • High 8.8
    CVE-2025-13553

    D-Link DWR-M920 formPinManageSetup sub_41C7FC buffer overflow

    A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of the file /boafrm/formPinManageSetup. This manipulation of the argument submit-url causes buffer overflow. It is possible to initiate the attack remotely. The exp…

    D-Link DWR-M920 Network devices
  • Medium 6.3
    CVE-2025-13306

    D-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injection

    A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploita…

    D-Link DWR-M920 DWR-M921 DIR-825M Network devices

Revision history

  1. #1

    Initiale Fassung

References