CVE-2024-9559

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*

History

08 Oct 2024, 18:37

Type Values Removed Values Added
References () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formWlanSetup.md - () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formWlanSetup.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.279366 - () https://vuldb.com/?ctiid.279366 - Permissions Required
References () https://vuldb.com/?id.279366 - () https://vuldb.com/?id.279366 - Third Party Advisory
References () https://vuldb.com/?submit.413919 - () https://vuldb.com/?submit.413919 - Third Party Advisory
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
CPE cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
First Time Dlink dir-605l Firmware
Dlink
Dlink dir-605l
Summary
  • (es) Se ha encontrado una vulnerabilidad en D-Link DIR-605L 2.13B01 BETA. Se ha clasificado como crítica. Se ve afectada la función formWlanSetup del archivo /goform/formWlanSetup. La manipulación del argumento webpage provoca un desbordamiento del búfer. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.

06 Oct 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-06 19:15

Updated : 2024-10-08 18:37


NVD link : CVE-2024-9559

Mitre link : CVE-2024-9559

CVE.ORG link : CVE-2024-9559


JSON object : View

Products Affected

dlink

  • dir-605l_firmware
  • dir-605l
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')