HIGH
D-Link DIR-605L formWlanWizardSetup buffer overflow
Published Oct 7, 2024
8.7
HIGHCVSS 4.0
EPSS 1.94%
Description
A vulnerability, which was classified as critical, was found in D-Link DIR-605L 2.13B01 BETA. Affected is the function formWlanWizardSetup of the file /goform/formWlanWizardSetup. The manipulation of the argument webpage leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
-
Affected
- 2.13B01 BETA
AND
- 2.13b01
-
Affected
- 2.13b01_beta
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-50019 Advisory
- https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formWlanWizardSetup.md exploitThird Party Advisory
- https://vuldb.com/?ctiid.279372 signaturepermissions-requiredPermissions Required
- https://vuldb.com/?id.279372 vdb-entrytechnical-descriptionThird Party Advisory
- https://vuldb.com/?submit.413923 third-party-advisoryThird Party Advisory
- https://www.dlink.com/ product
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-50019 | Advisory | |
| https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formWlanWizardSetup.md | exploitThird Party Advisory | |
| https://vuldb.com/?ctiid.279372 | signaturepermissions-requiredPermissions Required | |
| https://vuldb.com/?id.279372 | vdb-entrytechnical-descriptionThird Party Advisory | |
| https://vuldb.com/?submit.413923 | third-party-advisoryThird Party Advisory | |
| https://www.dlink.com/ | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Oct 7, 2024
Updated Oct 7, 2024
Reserved Oct 6, 2024
Link CVE-2024-9564
CISA Vulnrichment
Updated Oct 7, 2024
Red Hat
No data
GitHub
No data