This vulnerability affects the D-Link DIR-825M router running firmware version 1.1.12. The issue is located in the function sub_414BA8 within the /boafrm/formWanConfigSetup file, where manipulation of the submit-url argument can trigger a buffer overflow condition. The vulnerability is remotely exploitable without user interaction and requires low attack complexity and privileges. The CVSS 4.0 vector indicates high impact on confidentiality, integrity, and availability. No official fix or patch has been documented, and the product is not a cloud service, so remediation depends on vendor action.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or cause denial of service on affected devices. The high CVSS score reflects the potential for significant compromise of device functionality and security. Although an exploit is publicly available, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been documented, users should monitor D-Link communications for updates. Until a patch is available, restricting remote access to the device management interface and disabling WAN-side management where possible may reduce exposure.