Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q5f-665m-ch4q

Опубликовано: 18 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.4
CVSS3: 8.8

Описание

A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

EPSS

Процентиль: 39%
0.00177
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.8
nvd
3 месяца назад

A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

CVSS3: 8.8
fstec
3 месяца назад

Уязвимость функции sub_420F04() микропрограммного обеспечения маршрутизаторов D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 и DIR-825M, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 39%
0.00177
Низкий

7.4 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-119