The D-Link DIR-825M version 1.1.12 contains a buffer overflow vulnerability in the sub_4151FC function of the /boafrm/formVpnConfigSetup component. An attacker can remotely manipulate the submit-url parameter to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Public exploit details have been disclosed, but no vendor patch or official remediation is currently documented.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. The high CVSS score reflects significant potential impact on confidentiality, integrity, and availability of the router. This could compromise network security and disrupt connectivity for users relying on the DIR-825M device running firmware version 1.1.12.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling remote management features if enabled, restrict access to the device management interface to trusted networks, and monitor for unusual activity. Avoid exposing the device's management interface directly to the internet. Follow updates from D-Link for any forthcoming patches or official mitigations.