CVE-2023-24348

Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01

Description The issue is related to a stack overflow in the /goform/formSetACLFilter component, which can be triggered via the curTime parameter. This can potentially allow a remote attacker to cause a denial of service or execute arbitrary code.

Recommendations For D-Link N300 WI-FI Router DIR-605L version 2.13B01, as a temporary workaround, consider restricting access to the /goform/formSetACLFilter endpoint or avoiding the use of the curTime parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.