High · published December 29, 2025
🚨 A remote buffer overflow vulnerability in D-Link DWR-M920 could turn your router into a playground for attackers! 🔥 Think of it like a delivery truck that misdelivers packages due to a faulty navigation system — instead of going to the right address, it spills sensitive info all over the neighborhood! An attacker exploiting this vulnerability could gain unauthorized access to your router, leading to data leaks or complete control over your network. This could mean dropping malicious payloads or hijacking personal information — absolutely devastating!
Think of it like a delivery truck that misdelivers packages due to a faulty navigation system — instead of going to the right address, it spills sensitive info all over the neighborhood! This vulnerability occurs in the function sub_423848 of the /boafrm/formParentControl file, where manipulating the argument submit-url triggers a buffer overflow. This allows remote attackers to execute arbitrary code.
An attacker exploiting this vulnerability could gain unauthorized access to your router, leading to data leaks or complete control over your network. This could mean dropping malicious payloads or hijacking personal information — absolutely devastating! Immediate action is crucial! Update your D-Link DWR-M920 to version 1.1.51 or above. Additionally, review your router settings and monitor for any unusual activity to ensure your network remains secure. You've got this! By following these steps, you can lock down your router and keep your network safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| dlink/dwr-m920_firmware | ≤ 1.1.50 | — |