GCVE - cpe:2.3:h:dlink:dwr-m920:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dwr-m920:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dwr M920 (`d9ee65e7-832a-529c-a890-bb927800d35e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-15193`	not_vulnerable	2026-06-08 07:06:35.854619	D-Link DWR-M920 formParentControl sub_423848 buffer overflow HIGH (8.8) A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. Published: 2025-12-29T15:02:08.698Z Updated: 2025-12-29T16:10:51.648Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338578 https://vuldb.com/?ctiid.338578 https://vuldb.com/?submit.723556 https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formParentControl.md https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formParentControl.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15192`	not_vulnerable	2026-06-08 07:06:35.853909	D-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injection MEDIUM (6.3) A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_415328 of the file /boafrm/formLtefotaUpgradeQuectel. Such manipulation of the argument fota_url leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Published: 2025-12-29T14:32:08.392Z Updated: 2025-12-29T16:11:38.000Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338577 https://vuldb.com/?ctiid.338577 https://vuldb.com/?submit.723555 https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formLtefotaUpgradeQuectel.md https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formLtefotaUpgradeQuectel.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15191`	not_vulnerable	2026-06-08 07:06:35.853070	D-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 command injection MEDIUM (6.3) A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_4155B4 of the file /boafrm/formLtefotaUpgradeFibocom. This manipulation of the argument fota_url causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Published: 2025-12-29T14:02:07.207Z Updated: 2025-12-29T14:26:08.160Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338576 https://vuldb.com/?ctiid.338576 https://vuldb.com/?submit.723554 https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formLtefotaUpgradeFibocom.md https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formLtefotaUpgradeFibocom.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15190`	not_vulnerable	2026-06-08 07:06:35.852118	D-Link DWR-M920 formFilter sub_42261C stack-based overflow HIGH (8.8) A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be exploited. Published: 2025-12-29T13:32:08.616Z Updated: 2025-12-29T14:26:52.164Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338575 https://vuldb.com/?ctiid.338575 https://vuldb.com/?submit.723553 https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formFilter.md https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formFilter.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-15189`	not_vulnerable	2026-06-08 07:06:35.851204	D-Link DWR-M920 formDefRoute sub_464794 buffer overflow HIGH (8.8) A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. Published: 2025-12-29T13:02:11.742Z Updated: 2025-12-29T13:15:00.973Z Open on db.gcve.eu Reference links https://vuldb.com/?id.338574 https://vuldb.com/?ctiid.338574 https://vuldb.com/?submit.723552 https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formDefRoute.md https://github.com/panda666-888/vuls/blob/main/d-link/dwr-m920/formDefRoute.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13553`	not_vulnerable	2026-06-08 07:04:32.487993	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13305`	not_vulnerable	2026-06-08 07:04:31.962871	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13304`	not_vulnerable	2026-06-08 07:04:31.950504	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.