CNNVD-202511-2578 Information

CNNVD ID

CNNVD-202511-2578

CVE-2025-13553

  • CNNVD Published: 2025-11-23

Description (Chinese)

D-Link DWR-M920是中国友讯(D-Link)公司的一款路由器。 D-Link DWR-M920 1.1.50版本存在安全漏洞,该漏洞源于文件/boafrm/formPinManageSetup中参数submit-url的错误操作,可能导致缓冲区溢出。

Description (English)

D-Link DWR-M920 is a router for the Chinese company D-Link. There is a security loophole in version D-Link DWR-M920, version 1.1.50, which stems from the error of the parameter submit-url in the file/boafrm/formPinManageSetup, which could lead to a spilling out of the buffer zone.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

友讯

Published

2025-11-23

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.333320 https://vuldb.com/?submit.695435 https://www.dlink.com/ https://vuldb.com/?id.333320 https://github.com/QIU-DIE/CVE/issues/45 https://access.redhat.com/security/cve/cve-2025-13553

Share on: