CVE-2025-15190: D-Link DWR-M920 formFilter sub_42261C stack-based overflow
A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15190?
CVE-2025-15190 has a high severity rating due to its potential for remote exploitation leading to stack-based buffer overflow.
How do I fix CVE-2025-15190?
To fix CVE-2025-15190, update the D-Link DWR-M920 firmware to version 1.1.51 or later.
What impact does CVE-2025-15190 have on my device?
CVE-2025-15190 can allow attackers to execute arbitrary code remotely through a buffer overflow vulnerability.
Which versions of D-Link DWR-M920 are affected by CVE-2025-15190?
All versions of D-Link DWR-M920 up to and including 1.1.50 are affected by CVE-2025-15190.
Can CVE-2025-15190 be exploited remotely?
Yes, CVE-2025-15190 can be exploited remotely due to its nature as a stack-based buffer overflow vulnerability.