Walnut1337

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-868L version 2.01b05 **Description** A stack-based buffer overflow exists in the Authentication Handler component within the `/webfa authentication.cgi` endpoint. The issue occurs when the `strcpy()` function processes the `id` and `password` parameters without proper boundary checks. A remote, unauthenticated attacker can send an overly long payload to these parameters to corrupt the stack frame and overwrite the return address, potentially leading to arbitrary code execution with root privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Disable WAN access to the router web administration portal. Restrict local management access to dedicated, trusted management VLANs. Monitor perimeter logs for unusual POST requests targeting the `/webfa authentication.cgi` endpoint.