Stack-based Buffer Overflow Vulnerability Affects D-Link Wireless Routers
CVE-2024-45694

9.8CRITICAL

Key Information:

Vendor

D-link
Status
Dir-x5460 A1
Dir-x4860 A1
Vendor
CVE Published:
16 September 2024

What is CVE-2024-45694?

The web service of certain D-Link wireless router models suffers from a stack-based buffer overflow vulnerability. This issue allows unauthenticated remote attackers to exploit the vulnerability, potentially leading to arbitrary code execution on the affected devices. Given the security implications, users are advised to apply the latest updates provided by D-Link to mitigate the risks associated with this vulnerability.

Affected Version(s)

DIR-X4860 A1 1.00

DIR-X4860 A1 1.04

DIR-X5460 A1 1.01

References

https://www.twcert.org.tw/tw/cp-132-8080-7f494-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-8081-3fb39-2.html
third-party-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.