CVE-2022-25106

Name of the Vulnerable Software and Affected Versions D-Link DIR-859 version 1.05

Description The issue is related to a stack-based buffer overflow in the genacgi main() function, which can cause a Denial of Service (DoS) when a crafted payload is sent to the /gena.cgi API endpoint. This allows an attacker to potentially disrupt service.

Recommendations For D-Link DIR-859 version 1.05, consider disabling the genacgi main() function as a temporary workaround to prevent exploitation until a patch is available. Restrict access to the /gena.cgi API endpoint to minimize the risk of a Denial of Service (DoS) attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.