Buffer Overflow Vulnerability in DIR-860L v2.03 Could Lead to Crash or Arbitrary Command Execution

CVE-2024-42812
9.8CRITICAL

Key Information

Vendor
D-Link
Status
Dir-860l Firmware
Vendor
CVE Published:
19 August 2024

Summary

In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

Collectors

NVD DatabaseMitre Database
.