PT-2023-5528 · D Link · D-Link Dir-619L

CVE-2023-43860

·

Publicado

2023-09-28

·

Atualizado

2023-09-29

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions D-Link DIR-619L B1 version 2.02
Description The issue is related to a buffer overflow in the formSetWanNonLogin function, which can be exploited to cause a denial of service. This can be triggered by a remote attacker, allowing them to disrupt the service. The vulnerability is associated with writing data beyond the buffer boundaries in memory.
Recommendations For D-Link DIR-619L B1 version 2.02, as a temporary workaround, consider disabling the formSetWanNonLogin function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-06178
CVE-2023-43860

Produtos afetados

D-Link Dir-619L