D-Link DIR-822K/DWR-M920 vulnerabilities

A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt, where manipulation of the submit-url argument results in buffer overflow; the attack may be performed remotely.

A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup, where manipulation of the submit-url argument leads to buffer overflow; the attack is possible to carry out remotely.

A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. An unknown function of the file /boafrm/formVpnConfigSetup is impacted, where manipulation of the submit-url argument can lead to buffer overflow; the attack can be executed remotely.

D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50 contain a buffer overflow in unknown code of /boafrm/formFirewallAdv via manipulation of the submit-url argument. The attack can be launched remotely and a public exploit has been disclosed.

A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50 affecting an unknown part of the file /boafrm/formDdns. Manipulation of the submit-url argument causes memory corruption, and the attack may be initiated remotely.