Vulnerability Description
A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-825M Firmware | 1.01.07 |
| Dlink | Dir-825M | - |
| Dlink | Dwr-M920 Firmware | 1.01.07 |
| Dlink | Dwr-M920 | - |
| Dlink | Dwr-M921 Firmware | 1.01.07 |
| Dlink | Dwr-M921 | - |
| Dlink | Dwr-M961 Firmware | 1.01.07 |
| Dlink | Dwr-M961 | - |
| Dlink | Dwr-M960 Firmware | 1.01.07 |
| Dlink | Dwr-M960 | b1 |
Related Weaknesses (CWE)
References
- https://github.com/LX-LX88/cve/issues/12ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.332645Permissions RequiredVDB Entry
- https://vuldb.com/?id.332645Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.691809Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.691816Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.693784Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.693806Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.695424Third Party AdvisoryVDB Entry
- https://www.dlink.com/Product
- https://github.com/LX-LX88/cve/issues/12ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-13305?
CVE-2025-13305 is a vulnerability with a CVSS score of 8.8 (HIGH). A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Execut...
How severe is CVE-2025-13305?
CVE-2025-13305 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13305?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-825M Firmware, Dlink Dir-825M, Dlink Dwr-M920 Firmware, Dlink Dwr-M920, Dlink Dwr-M921 Firmware.