This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-15193 | BDVDB-2026-308154 Detail

D-LinkDWR-M920

Description#

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.