A buffer overflow vulnerability exists in D-Link devices DWR-M920, DWR-M921, DWR-M960, DIR-822K, and DIR-825M running firmware version 1.01.07. The flaw is triggered by manipulating the 'host' argument in the /boafrm/formTracerouteDiagnosticRun endpoint. This vulnerability can be exploited remotely and has publicly available exploit code. It is rated high severity with a CVSS score of 8.8.