CVE-2025-13305

Name of the Vulnerable Software and Affected Versions D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M version 1.01.07

Description A weakness exists in D-Link routers that involves improper processing of the host argument within the /boafrm/formTracerouteDiagnosticRun file. Manipulation of this argument can lead to a buffer overflow, potentially allowing for remote code execution. The exploit for this issue has been publicly released.

Recommendations Update the firmware on D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M version 1.01.07. If these routers are end-of-life models, consider replacing them to avoid a permanent vulnerability window.