PT-2023-2517 · D Link · D-Link Dir-878

CVE-2023-24798

·

Publicado

2023-04-07

·

Atualizado

2025-02-13

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions D-Link DIR878 version DIR 878 FW120B05
Description A stack overflow vulnerability in the sub 475FB0 function has been discovered, allowing attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. This issue can be exploited by remote attackers, potentially leading to the execution of arbitrary code in the system or a DoS.
Recommendations For D-Link DIR878 version DIR 878 FW120B05, as a temporary workaround, consider disabling the sub 475FB0 function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-02315
CVE-2023-24798

Produtos afetados

D-Link Dir-878