PT-2023-2517 · D Link · D-Link Dir-878
CVE-2023-24798
·
Publicado
2023-04-07
·
Atualizado
2025-02-13
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link DIR878 version DIR 878 FW120B05
Description
A stack overflow vulnerability in the
sub 475FB0 function has been discovered, allowing attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. This issue can be exploited by remote attackers, potentially leading to the execution of arbitrary code in the system or a DoS.Recommendations
For D-Link DIR878 version DIR 878 FW120B05, as a temporary workaround, consider disabling the
sub 475FB0 function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
D-Link Dir-878