A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formStaticDHCP of the component Authorization Interface. The manipulation of the argument Hostname leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.49 is able to address this issue. It is recommended to upgrade the affected component.
References
| Link | Resource |
|---|---|
| https://github.com/ZOKEYE/CVE/blob/main/D-link.md | Broken Link |
| https://vuldb.com/?ctiid.305608 | Permissions Required VDB Entry |
| https://vuldb.com/?id.305608 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.553547 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Jul 2025, 15:31
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink dwr-m961
Dlink Dlink dwr-m961 Firmware |
|
| CPE | cpe:2.3:o:dlink:dwr-m961_firmware:1.1.36:*:*:*:*:*:*:* cpe:2.3:h:dlink:dwr-m961:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/ZOKEYE/CVE/blob/main/D-link.md - Broken Link | |
| References | () https://vuldb.com/?submit.553547 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.305608 - Permissions Required, VDB Entry | |
| References | () https://www.dlink.com/ - Product | |
| References | () https://vuldb.com/?id.305608 - Third Party Advisory, VDB Entry |
18 Apr 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-18 09:15
Updated : 2025-07-16 15:31
NVD link : CVE-2025-3785
Mitre link : CVE-2025-3785
JSON object : View
Products Affected
dlink
- dwr-m961_firmware
- dwr-m961