dwr-m920_firmware vulnerabilities
CVEs whose affected-version data names the dwr-m920_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2025-15193High· 8.8A vulnerability was detected in D-Link DWR-M920 up to 1.1.50
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possib…
CVE-2025-15192Medium· 6.3A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50
A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_415328 of the file /boafrm/formLtefotaUpgradeQuectel. Such manipulation of the argument fota_url leads to command inject…
CVE-2025-15190High· 8.8A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50
A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be l…
CVE-2025-15189High· 8.8A vulnerability was identified in D-Link DWR-M920 up to 1.1.50
A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiate…
CVE-2025-15191Medium· 6.3A weakness has been identified in D-Link DWR-M920 up to 1.1.50
A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_4155B4 of the file /boafrm/formLtefotaUpgradeFibocom. This manipulation of the argument fota_url causes command injection. Remote ex…