CVE-2024-9561

A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01 BETA. This affects the function formSetWAN_Wizard51/formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*

History

08 Oct 2024, 18:38

Type Values Removed Values Added
References () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formSetWAN_Wizard.md - () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formSetWAN_Wizard.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.279369 - () https://vuldb.com/?ctiid.279369 - Permissions Required
References () https://vuldb.com/?id.279369 - () https://vuldb.com/?id.279369 - Third Party Advisory
References () https://vuldb.com/?submit.413920 - () https://vuldb.com/?submit.413920 - Third Party Advisory
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
CPE cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
Summary
  • (es) Se ha encontrado una vulnerabilidad clasificada como crítica en D-Link DIR-605L 2.13B01 BETA. Afecta a la función formSetWAN_Wizard51/formSetWAN_Wizard52. La manipulación del argumento curTime provoca un desbordamiento del búfer. Es posible iniciar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.
First Time Dlink dir-605l Firmware
Dlink
Dlink dir-605l

06 Oct 2024, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-06 23:15

Updated : 2024-10-08 18:38


NVD link : CVE-2024-9561

Mitre link : CVE-2024-9561

CVE.ORG link : CVE-2024-9561


JSON object : View

Products Affected

dlink

  • dir-605l_firmware
  • dir-605l
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')