CVE-2025-13550

CVE-2025-13550 affects D-Link DIR-822K and DWR-M920 (firmware 1.00_20250513164613 and 1.1.50). The vulnerability resides in the function handling the /boafrm/formVpnConfigSetup file, where manipulating the submit-url argument can cause a buffer overflow. Exploitation is remote, and a public explo...