The vulnerabilities of the sub_414BA8() and sub_4138B0() functions in the embedded web server of D-Link’s router microprogramming systems DIR-822K and DWR-M920 allow attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the sub414BA8 and sub4138B0 functions in the embedded web server of D-Link’s DIR-822K and DWR-M920 router microprogramming systems is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability...