CVE-2025-13306

CVE-2025-13306 affects D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M (firmware 1.1.5). The vulnerability is a command injection in the system function of the file /boafrm/formDebugDiagnosticRun, triggered by manipulating the host argument. This allows remote code execution with network access ...

CVE-2025-13548

Summary: CVE-2025-13548 affects D-Link DIR-822K and DWR-M920 routers. The vulnerability resides in the file /boafrm/formFirewallAdv, where manipulation of the submit-url argument causes a buffer overflow. This can be triggered remotely, with the exploit publicly disclosed. Affected versions inclu...

CVE-2025-13549

CVE-2025-13549 affects the D-Link DIR-822K router (version 1.00). The issue resides in the function sub_455524 of the file /boafrm/formNtp, where manipulating the submit-url argument triggers a buffer overflow. This enables remote exploitation, and multiple sources note that the exploit has been ...

CVE-2025-13550

CVE-2025-13550 affects D-Link DIR-822K and DWR-M920 (firmware 1.00_20250513164613 and 1.1.50). The vulnerability resides in the function handling the /boafrm/formVpnConfigSetup file, where manipulating the submit-url argument can cause a buffer overflow. Exploitation is remote, and a public explo...

CVE-2025-13552

CVE-2025-13552 affects D-Link DIR-822K and DWR-M920 (versions 1.00_20250513164613 and 1.1.50). The flaw is a buffer overflow in an unknown function of the file /boafrm/formWlEncrypt caused by manipulation of the submit-url argument; the attack can be performed remotely. Public exploit exists. Con...

CVE-2025-13551

CVE-2025-13551 affects D-Link DIR-822K and DWR-M920 (versions 1.00_20250513164613 and 1.1.50). The vulnerability is in an unknown function within the file /boafrm/formWanConfigSetup; manipulating the submit-url argument leads to a buffer overflow. The attack can be carried out remotely, and a pub...

CVE-2025-13547

CVE-2025-13547 affects D-Link DIR-822K and DWR-M920 routers (versions 1.00 20250513164613 through 1.1.50). The flaw is in the file /boafrm/formDdns, where manipulating the argument submit-url leads to memory corruption. The issue can be triggered remotely and an exploit has been published. Accord...