Threats tagged 'ghsa-gf5v-8444-xrmc'

A memory corruption vulnerability exists in D-Link DIR-822K and DWR-M920 firmware versions 1.00_20250513164613 and 1.1.50. The flaw is triggered by manipulating the submit-url argument in the /boafrm/formDdns file. This vulnerability can be exploited remotely and has published exploit code available. It has a high severity rating with a CVSS score of 8.8.