PT-2023-5326 · D Link · Di-7200Gv2.E1
CVE-2023-43199
·
Publicado
2023-07-10
·
Atualizado
2023-09-22
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
D-Link device DI-7200GV2.E1 version 21.04.09E1
Description
The issue is related to a stack overflow in the H5/login.cgi function, specifically via the
prev parameter. This can be exploited by a remote attacker to cause a denial of service.Recommendations
For D-Link device DI-7200GV2.E1 version 21.04.09E1, as a temporary workaround, consider restricting access to the H5/login.cgi function until a patch is available. Avoid using the
prev parameter in the affected function to minimize the risk of exploitation.Exploit
Correção
Stack Overflow
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Di-7200Gv2.E1