Stack Overflow Vulnerability in D-Link N300 WI-FI Router
CVE-2023-24348

9.8CRITICAL

Key Information:

Vendor

D-Link
Status
Dir-605l Firmware
Vendor
CVE Published:
10 February 2023

What is CVE-2023-24348?

The D-Link N300 WI-FI Router DIR-605L version v2.13B01 has been found to be vulnerable to a stack overflow via the 'curTime' parameter at the '/goform/formSetACLFilter' endpoint. This vulnerability could potentially allow remote attackers to execute arbitrary code, posing significant risks to the network's integrity and user data. It is essential for users to prioritize security measures and patch vulnerabilities promptly to mitigate possible exploitation.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-6...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.