A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.4 · dlinkNVD modified 2026-10-18 20:10
Affected (CPE criteria) 5
cpe:2.3:o:dlink:dir-825m_firmware:1.01.07:*:*:*:*:*:*:*cpe:2.3:o:dlink:dwr-m920_firmware:1.01.07:*:*:*:*:*:*:*cpe:2.3:o:dlink:dwr-m921_firmware:1.01.07:*:*:*:*:*:*:*cpe:2.3:o:dlink:dwr-m961_firmware:1.01.07:*:*:*:*:*:*:*cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*
References 10
- https://github.com/LX-LX88/cve/issues/12 Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.332645 Permissions Required, VDB Entry
- https://vuldb.com/?id.332645 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.691809 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.691816 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.693784 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.693806 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.695424 Third Party Advisory, VDB Entry
- https://www.dlink.com/ Product
- https://github.com/LX-LX88/cve/issues/12 Exploit, Issue Tracking, Third Party Advisory