CVE-2025-13550
Published: 23 November 2025
Description
A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be executed remotely. The exploit has been…
more
publicly disclosed and may be utilized.
Mitigating Controls (NIST 800-53 r5)AI
Flaw remediation directly addresses the buffer overflow vulnerability by identifying, patching, and testing firmware updates for the affected /boafrm/formVpnConfigSetup function.
Information input validation prevents buffer overflows by checking the submit-url argument for correctness, length, and appropriateness before processing.
Memory protection mechanisms such as stack canaries, ASLR, and address space layout randomization mitigate exploitation of the buffer overflow for arbitrary code execution.
Security SummaryAI
CVE-2025-13550 is a buffer overflow vulnerability in D-Link DIR-822K and DWR-M920 routers running firmware versions 1.00_20250513164613 and 1.1.50. The flaw affects an unknown function in the file /boafrm/formVpnConfigSetup, where manipulation of the submit-url argument triggers the overflow. Published on 2025-11-23, it carries a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and is linked to CWE-119 and CWE-120.
The vulnerability is remotely exploitable over the network by attackers with low privileges, requiring low attack complexity and no user interaction. Exploitation can result in high impacts to confidentiality, integrity, and availability, potentially allowing arbitrary code execution or system compromise on affected devices.
References include GitHub issues at https://github.com/QIU-DIE/CVE/issues/33 and https://github.com/QIU-DIE/CVE/issues/47, along with VulDB entries at https://vuldb.com/?ctiid.333317, https://vuldb.com/?id.333317, and https://vuldb.com/?submit.693777. The exploit has been publicly disclosed and may be utilized.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow vulnerability in the web interface (/boafrm/formVpnConfigSetup) of a public-facing router enables exploitation of a public-facing application for remote code execution.