CVE-2024-25331: D-Link Dir-822 Firmware

Critical severity, CVSS 9.3. EPSS: 0.3% chance of exploitation in the next 30 days.

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow.

Affected products

• D-Link Dir-822 Firmware: version 2.02krb09 only; version 2.03wwb01 only

Published 2024-03-12. Last modified 2026-06-17.