High severity8.8NVD Advisory· Published Nov 17, 2025· Updated Jun 17, 2026
CVE-2025-13304
CVE-2025-13304
Description
A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18cpe:2.3:o:dlink:dwr-m920_firmware:1.1.47:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dlink:dwr-m920_firmware:1.1.47:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dwr-m920_firmware:1.01.07:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dwr-m921_firmware:1.01.07:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dlink:dwr-m921_firmware:1.01.07:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dwr-m921_firmware:1.1.47:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-825m_firmware:1.01.07:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dlink:dir-825m_firmware:1.01.07:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dir-825m_firmware:1.1.47:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dwr-m961_firmware:1.01.07:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dlink:dwr-m961_firmware:1.01.07:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dwr-m961_firmware:1.1.47:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dlink:dwr-m960_firmware:1.01.07:*:*:*:*:*:*:*
- cpe:2.3:o:dlink:dwr-m960_firmware:1.1.47:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- github.com/LX-LX88/cve/issues/11nvdExploitIssue TrackingThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.dlink.comnvdProduct
News mentions
0No linked articles in our index yet.