PT-2025-53717

CVE-2025-15190

Published

2025-12-24

Updated

2026-10-07

Description by

CVSS 2.0

9.0

High

MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DWR-M920 versions up to 1.1.50

Description A security flaw exists in D-Link DWR-M920. The issue involves a stack-based buffer overflow in the sub 42261C function within the /boafrm/formFilter file. Manipulation of the ip6addr argument can trigger this overflow, and the attack can be launched remotely. The exploit for this issue has been publicly released.

Recommendations Versions prior to 1.1.50 should be updated.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-121: Stack-based Buffer Overflow

Related identifiers