CVE-2023-29961

Name of the Vulnerable Software and Affected Versions D-Link DIR-605L firmware version 1.17B01 BETA

Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This can allow a remote attacker to execute arbitrary code. The vulnerability is related to a stack overflow via the /goform/formTcpipSetup endpoint.

Recommendations For D-Link DIR-605L firmware version 1.17B01 BETA, consider disabling access to the /goform/formTcpipSetup endpoint until a patch is available. Restricting the use of this endpoint can minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.