NetSight
high8.8

CVE-2025-13547

A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50.

Impact

A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The exploit has been published and may be used.

Affected products

VendorProductAffected versions
DlinkDir-822k Firmware
Version 1.00_20250513164613
DlinkDwr-M920 Firmware
Version 1.1.50

Weakness classification

References