Yubozhaoo

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: A buffer overflow issue in the /bin/boa via formTcpipSetup function of the D-Link DIR-619L router's firmware allows remote authenticated users to trigger a denial of service (DoS) through the `curTime` parameter. This vulnerability can be exploited by a remote attacker to cause a denial of service. Recommendations: For D-Link DIR-619L Rev.B version 2.06B1, consider restricting access to the formTcpipSetup function until a patch is available. As a temporary workaround, avoid using the `curTime` parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L versions 2.06B1 Description: The issue is related to a buffer overflow in the formWlanSetup Wizard function of the D-Link DIR-619L router's firmware. This can be exploited by a remote attacker to cause a denial of service using the `webpage` parameter in the /bin/boa endpoint. Recommendations: For version 2.06B1, consider disabling the formWlanSetup Wizard function as a temporary workaround until a patch is available. Restrict access to the /bin/boa endpoint to minimize the risk of exploitation. Avoid using the `webpage` parameter in the affected endpoint until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: A buffer overflow issue in the /bin/boa binary via the formWlanGuestSetup function allows remote authenticated users to trigger a denial of service (DoS) through the `webpage` parameter. This vulnerability is related to a buffer overflow operation in the memory of the D-Link DIR-619L router's firmware. Recommendations: For D-Link DIR-619L Rev.B version 2.06B1, consider restricting access to the formWlanGuestSetup function and the `webpage` parameter in the /bin/boa binary to minimize the risk of exploitation. As a temporary workaround, avoid using the `webpage` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** D-Link DIR-619L Rev.B version 2.06B1 **Description** The issue is related to a buffer overflow vulnerability in the /bin/boa component of the D-Link DIR-619L Rev.B router, specifically via the "goform/formWPS" endpoint, where the `webpage` parameter is involved. This vulnerability can be exploited by remote authenticated users to trigger a denial of service (DoS). The vulnerability is also associated with incorrect clearing or release of resources, which can be exploited by a remote attacker to cause a denial of service. **Recommendations** For D-Link DIR-619L Rev.B version 2.06B1, consider disabling access to the "goform/formWPS" endpoint as a temporary workaround until a patch is available. Restrict access to the `/bin/boa` component to minimize the risk of exploitation. Avoid using the `webpage` parameter in the affected endpoint until the issue is resolved.