D-Link Dir-822k Firmware vulnerabilities

7 CVEs affecting D-Link Dir-822k Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13552, published 2025-11-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-13306, published 2025-11-18. High severity, CVSS 8.8. EPSS: 8.3% chance of exploitation in the next 30 days. A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of…
CVE-2025-13548, published 2025-11-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the…
CVE-2025-13552, published 2025-11-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the…
CVE-2025-13551, published 2025-11-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the…
CVE-2025-13550, published 2025-11-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the…
CVE-2025-13547, published 2025-11-23. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory…
CVE-2025-13549, published 2025-11-23. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer…