Dwr M920 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:dlink:dwr-m920_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dwr M920 Firmware (63192394-4062-51a9-b20f-dbd1bc537206) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15193 |
vulnerable | 2026-06-08 07:06:35.854589 |
D-Link DWR-M920 formParentControl sub_423848 buffer overflow
HIGH (8.8)
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/formParentControl. Performing manipulation of the argument submit-url results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2025-12-29T15:02:08.698Z
Updated: 2025-12-29T16:10:51.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15192 |
vulnerable | 2026-06-08 07:06:35.853777 |
D-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injection
MEDIUM (6.3)
A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_415328 of the file /boafrm/formLtefotaUpgradeQuectel. Such manipulation of the argument fota_url leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-12-29T14:32:08.392Z
Updated: 2025-12-29T16:11:38.000Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15191 |
vulnerable | 2026-06-08 07:06:35.852961 |
D-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 command injection
MEDIUM (6.3)
A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_4155B4 of the file /boafrm/formLtefotaUpgradeFibocom. This manipulation of the argument fota_url causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Published: 2025-12-29T14:02:07.207Z
Updated: 2025-12-29T14:26:08.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15190 |
vulnerable | 2026-06-08 07:06:35.852081 |
D-Link DWR-M920 formFilter sub_42261C stack-based overflow
HIGH (8.8)
A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Published: 2025-12-29T13:32:08.616Z
Updated: 2025-12-29T14:26:52.164Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15189 |
vulnerable | 2026-06-08 07:06:35.850439 |
D-Link DWR-M920 formDefRoute sub_464794 buffer overflow
HIGH (8.8)
A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used.
Published: 2025-12-29T13:02:11.742Z
Updated: 2025-12-29T13:15:00.973Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.