← Database

CVE-2025-13305

HIGH CVSS: 8.8 Published: 2025-11-17 Modified: 2026-06-17

Description

A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.

Affected Platforms

Dlink Dir-825M FirmwareDlink Dwr-M961 FirmwareDlink Dwr-M920Dlink Dwr-M960Dlink Dwr-M960 FirmwareDlink Dwr-M920 FirmwareDlink Dwr-M921Dlink Dwr-M921 FirmwareDlink Dir-825MDlink Dwr-M961

Weakness Type

CWE-119, CWE-120, CWE-120

References