High severity8.8NVD Advisory· Published Nov 23, 2025· Updated Jun 17, 2026

CVE-2025-13547

Description

A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The exploit has been published and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dir 822k Firmware
cpe:2.3:o:dlink:dir-822k_firmware:1.00_20250513164613:*:*:*:*:*:*:*
Dlink/Dwr M920 Firmware
cpe:2.3:o:dlink:dwr-m920_firmware:1.1.50:*:*:*:*:*:*:*
Dlink/DWR-M920llm-create
Range: 1.1.50
Dlink/DIR-822Kllm-create
Range: 1.00_20250513164613
Dlink/DIR-822cpe-rescue
Range: 1.00_20250513164613
Dlink/DWR-M921cpe-rescue
Range: 1.00_20250513164613

Patches

Vulnerability mechanics

References

github.com/QIU-DIE/CVE/issues/30nvdExploitIssue Tracking
github.com/QIU-DIE/CVE/issues/42nvdExploitIssue Tracking
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
www.dlink.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000