CVE-2020-8962

Name of the Vulnerable Software and Affected Versions D-Link DIR-842 REVC version v3.13B09 HOTFIX

Description A stack-based buffer overflow issue was discovered due to the use of strcpy for LOGINPASSWORD when handling a POST request to the "/MTFWU" endpoint.

Recommendations For D-Link DIR-842 REVC version v3.13B09 HOTFIX, as a temporary workaround, consider disabling the use of strcpy for LOGINPASSWORD in the "/MTFWU" endpoint until a patch is available. Restrict access to the "/MTFWU" endpoint to minimize the risk of exploitation. Avoid using the LOGINPASSWORD variable in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.