Stack Overflow Vulnerability in D-Link DIR-882 Router Firmware
CVE-2024-22751

9.8CRITICAL

Key Information:

Vendor

D-Link
Status
Dir-882 A1 Firmware
Vendor
CVE Published:
24 January 2024

What is CVE-2024-22751?

The D-Link DIR-882 router, specifically the firmware version DIR882A1_FW130B06, is affected by a stack overflow vulnerability identified in the sub_477AA0 function. This vulnerability could allow an attacker to execute arbitrary code, potentially compromising the affected device and leading to unauthorized access or other security breaches. Users are advised to apply necessary patches and monitor their devices for any unusual activity.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/5erua/vuls/blob/main/dir882.md

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.