Buffer Overflow Vulnerability in D-Link DIR-619L Router
CVE-2024-33772

5.7MEDIUM

Key Information:

Vendor

D-Link
Status
Dir-619l Firmware
Vendor
CVE Published:
14 May 2024

What is CVE-2024-33772?

A buffer overflow issue exists in the D-Link DIR-619L Rev.B 2.06B1 router that affects the functionality of /bin/boa. Specifically, through the formTcpipSetup endpoint, remote authenticated users can exploit the vulnerability by manipulating the 'curTime' parameter. This flaw can result in a denial of service (DoS), impacting the availability of the affected devices. Proper security measures should be deployed to mitigate the risks associated with this vulnerability.

References

https://github.com/YuboZhaoo/IoT/blob/main/D-Link/DIR-619...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.