CVE-2025-13552
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt, where manipulation of the submit-url argument results in buffer overflow; the attack may be performed remotely.
Risk Assessment
A publicly released exploit may be used by a remote attacker to trigger a buffer overflow, potentially leading to device instability or code execution.
Recommendation
Update the firmware of D-Link DIR-822K and DWR-M920 devices to a version containing the fix; until then, restrict access to the administrative interface from external networks.
Other vulnerabilities in D-Link DIR-822K/DWR-M920
See all- CVE-2025-13551High
A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup, where manipulation of the submit-url argument leads to buffer overflow; the attack is possible to carry out remotely.
- CVE-2025-13550High
A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. An unknown function of the file /boafrm/formVpnConfigSetup is impacted, where manipulation of the submit-url argument can lead to buffer overflow; the attack can be executed remotely.
- CVE-2025-13548High
D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50 contain a buffer overflow in unknown code of /boafrm/formFirewallAdv via manipulation of the submit-url argument. The attack can be launched remotely and a public exploit has been disclosed.
- CVE-2025-13547High
A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50 affecting an unknown part of the file /boafrm/formDdns. Manipulation of the submit-url argument causes memory corruption, and the attack may be initiated remotely.
Original NVD description (English source)
A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS