medium6.3
CVE-2025-13306
A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5.
Impact
A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dwr-M920 Firmware | Version 1.1.5 |
| Dlink | Dwr-M921 Firmware | Version 1.1.50 |
| Dlink | Dir-822k Firmware | Version tk_1.00_20250513164613 |
| Dlink | Dir-825m Firmware | Version 1.1.12 |