High · published November 23, 2025
⚡ A crafty buffer overflow vulnerability lurks in D-Link DIR-822K and DWR-M920 routers, just waiting for an attacker to strike! 🔥 Think of this like a water pipe that can burst under too much pressure. When the wrong input is sent to the router's configuration, it's like cranking the water flow to the max—eventually, it overflows, causing chaos! An attacker could leverage this vulnerability to execute malicious code remotely, gaining control over the router. This means they could intercept your internet traffic, manipulate your network settings, or even launch further attacks—truly a nightmare scenario!
Think of this like a water pipe that can burst under too much pressure. When the wrong input is sent to the router's configuration, it's like cranking the water flow to the max—eventually, it overflows, causing chaos! This vulnerability occurs due to a buffer overflow caused by manipulating the 'submit-url' argument in the /boafrm/formWanConfigSetup function. When this function processes unexpected input, it can lead to unauthorized access and execution of arbitrary code.
An attacker could leverage this vulnerability to execute malicious code remotely, gaining control over the router. This means they could intercept your internet traffic, manipulate your network settings, or even launch further attacks—truly a nightmare scenario! To protect your network, immediately update your D-Link devices to the latest firmware version. Regularly check for updates and ensure that any unnecessary remote access is disabled to minimize exposure. 🛡️ You've got this! Stay vigilant, patch those routers, and keep your network secure! 🚀
| Product | Versions | Fixed in |
|---|---|---|
| dlink/dir-822k_firmware | all versions | — |
| dlink/dwr-m920_firmware | all versions | — |