VYPR

DIR-822K

by Dlink

CVEs (6)

  • CVE-2025-13552HigNov 23, 2025
    risk 0.57cvss 8.8epss 0.01

    A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from…

  • CVE-2025-13551HigNov 23, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. The attack is possible to be…

  • CVE-2025-13550HigNov 23, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be executed remotely.…

  • CVE-2025-13548HigNov 23, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The…

  • CVE-2025-13547HigNov 23, 2025
    risk 0.57cvss 8.8epss 0.01

    A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The exploit has been…

  • CVE-2025-13306MedNov 18, 2025
    risk 0.42cvss 6.3epss 0.08

    A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploitation of the attack…