High · published November 18, 2025
⚡ A sneaky buffer overflow vulnerability lurks in D-Link routers, ready to be exploited remotely with just a little argument manipulation! 🔥 Think of it as a delivery service that miscalculates the weight of a package, causing it to overflow and disrupt the entire sorting process — the network gets bogged down, potentially leaving critical data exposed. An attacker can trigger this vulnerability and potentially execute arbitrary code remotely, leading to unauthorized access to your network. If exploited, this could compromise sensitive information and disrupt network services, making your devices vulnerable to a range of malicious activities.
Think of it as a delivery service that miscalculates the weight of a package, causing it to overflow and disrupt the entire sorting process — the network gets bogged down, potentially leaving critical data exposed. This vulnerability is caused by a buffer overflow in the '/boafrm/formPingDiagnosticRun' code of several D-Link router models, allowing for remote code execution through argument manipulation.
An attacker can trigger this vulnerability and potentially execute arbitrary code remotely, leading to unauthorized access to your network. If exploited, this could compromise sensitive information and disrupt network services, making your devices vulnerable to a range of malicious activities. Immediately patch affected devices to versions 1.01.08 or 1.1.48 or higher. Additionally, consider implementing strict firewall rules and monitoring network traffic for any unusual activity. Don't leave your network unguarded! You've got this! Follow these steps to lock down your devices and keep your network safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| dlink/dir-825m_firmware | all versions | — |
| dlink/dir-825m_firmware | all versions | — |
| dlink/dwr-m920_firmware | all versions | — |
| dlink/dwr-m920_firmware | all versions | — |
| dlink/dwr-m921_firmware | all versions | — |
| dlink/dwr-m921_firmware | all versions | — |
| dlink/dwr-m961_firmware | all versions | — |
| dlink/dwr-m961_firmware | all versions | — |
| dlink/dwr-m960_firmware | all versions | — |
| dlink/dwr-m960_firmware | all versions | — |