Vulnerability Description
A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-825M Firmware | 1.01.07 |
| Dlink | Dir-825M | - |
| Dlink | Dwr-M920 Firmware | 1.01.07 |
| Dlink | Dwr-M920 | - |
| Dlink | Dwr-M921 Firmware | 1.01.07 |
| Dlink | Dwr-M921 | - |
| Dlink | Dwr-M961 Firmware | 1.01.07 |
| Dlink | Dwr-M961 | - |
| Dlink | Dwr-M960 Firmware | 1.01.07 |
| Dlink | Dwr-M960 | b1 |
Related Weaknesses (CWE)
References
- https://github.com/LX-LX88/cve/issues/11ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.332644Permissions RequiredVDB Entry
- https://vuldb.com/?id.332644Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.691808Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.691810Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.691812Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.691817Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.691821Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
- https://github.com/LX-LX88/cve/issues/11ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-13304?
CVE-2025-13304 is a vulnerability with a CVSS score of 8.8 (HIGH). A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Per...
How severe is CVE-2025-13304?
CVE-2025-13304 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13304?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-825M Firmware, Dlink Dir-825M, Dlink Dwr-M920 Firmware, Dlink Dwr-M920, Dlink Dwr-M921 Firmware.