Vulnerability record · CVE-2025-13549 · published 23 November 2025

CVE-2025-13549: Dlink dir-822k firmware memory buffer overflow vulnerability

Dlink · Dir 822k Firmware

A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

7.4 CVSS 4.0 High EPSS 0.73% · top 47.6% CWE-119 · Memory buffer overflowCWE-120 · Classic buffer overflow

7.4CVSS 4.0 base score, v2 9.0

0.73%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Dir 822k Firmware Dlink

References

Link	Tags
https://github.com/QIU-DIE/CVE/issues/32	ExploitIssue Tracking
https://vuldb.com/?ctiid.333316	Permissions RequiredVDB Entry
https://vuldb.com/?id.333316	Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.693776	Third Party AdvisoryVDB Entry
https://www.dlink.com/	Product
https://github.com/QIU-DIE/CVE/issues/32	ExploitIssue Tracking

Track CVE-2025-13549 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.4CVE-2025-13552Dlink dir-822k firmware memory buffer overflow vulnerabilityA security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the fi…EPSS 0.76%23 Nov 2025 7.4CVE-2025-13551Dlink dir-822k firmware memory buffer overflow vulnerabilityA vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /b…EPSS 0.76%23 Nov 2025 7.4CVE-2025-13550Dlink dir-822k firmware memory buffer overflow vulnerabilityA vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVp…EPSS 0.76%23 Nov 2025 7.4CVE-2025-13548Dlink dir-822k firmware memory buffer overflow vulnerabilityA vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafr…EPSS 0.79%23 Nov 2025 7.4CVE-2025-13547Dlink dir-822k firmware memory buffer overflow vulnerabilityA flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This man…EPSS 0.74%23 Nov 2025 2.1CVE-2025-13306Dlink dwr-m920 firmware injection vulnerabilityA security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /bo…EPSS 8.3%18 Nov 2025 8.8CVE-2026-8452Citrix NetScaler ADC and Gateway memory buffer overflow causes DoSCVE-2026-8452 is a memory buffer overflow (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that leads to unpredictable or erroneous behavior a…KEVEPSS 1.0%analysed30 Jun 2026 8.8CVE-2009-3459Adobe Reader and Acrobat heap buffer overflow via crafted PDFAdobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 contain a heap-based buffer overflow (CWE-122) triggered by a crafted…KEVEPSS 87%analysed13 Oct 2009

Source: NIST National Vulnerability Database (record CVE-2025-13549), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.