216.73.217.139

CVE-2025-13304

· Published 17/11/2025 23:15 · Modified 08/12/2025 14:12

Labels: CVE-2025-13304 2025-11-17CVE-2025-13304CWE-119[email protected]

Essential information

Published
17/11/2025 23:15
Modified
08/12/2025 14:12
Author
—
Creator
—
CVSS
7.4 HIGH (v3) 7.4 HIGH (v4.0)
CISA KEV
No
CWE
—
CVSS vector
—

CVSS metrics

Description

A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

NVD status

Status
Analyzed — CVE has had analysis completed and all data associations made.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
dlink / dir-825m firmware cpe:2.3:o:dlink:dir-825m_firmware:1.01.07:*:*:*:*:*:*:*
dlink / dir-825m firmware cpe:2.3:o:dlink:dir-825m_firmware:1.1.47:*:*:*:*:*:*:*
dlink / dir-825m cpe:2.3:h:dlink:dir-825m:-:*:*:*:*:*:*:*
dlink / dwr-m920 firmware cpe:2.3:o:dlink:dwr-m920_firmware:1.01.07:*:*:*:*:*:*:*
dlink / dwr-m920 firmware cpe:2.3:o:dlink:dwr-m920_firmware:1.1.47:*:*:*:*:*:*:*
dlink / dwr-m920 cpe:2.3:h:dlink:dwr-m920:-:*:*:*:*:*:*:*
dlink / dwr-m921 firmware cpe:2.3:o:dlink:dwr-m921_firmware:1.01.07:*:*:*:*:*:*:*
dlink / dwr-m921 firmware cpe:2.3:o:dlink:dwr-m921_firmware:1.1.47:*:*:*:*:*:*:*
dlink / dwr-m921 cpe:2.3:h:dlink:dwr-m921:-:*:*:*:*:*:*:*
dlink / dwr-m961 firmware cpe:2.3:o:dlink:dwr-m961_firmware:1.01.07:*:*:*:*:*:*:*
dlink / dwr-m961 firmware cpe:2.3:o:dlink:dwr-m961_firmware:1.1.47:*:*:*:*:*:*:*
dlink / dwr-m961 cpe:2.3:h:dlink:dwr-m961:-:*:*:*:*:*:*:*
dlink / dwr-m960 firmware cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*
dlink / dwr-m960 firmware cpe:2.3:o:dlink:dwr-m960_firmware:1.1.47:*:*:*:*:*:*:*
dlink / dwr-m960 cpe:2.3:h:dlink:dwr-m960:b1:*:*:*:*:*:*:*

References