CVE-2023-24350

Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01

Description The issue is related to a stack overflow in the D-Link N300 WI-FI Router DIR-605L, which can be triggered via the config.smtp email subject parameter at the "/goform/formSetEmail" endpoint. This can potentially allow a remote attacker to cause a denial of service or execute arbitrary code.

Recommendations For D-Link N300 WI-FI Router DIR-605L version 2.13B01, consider disabling the /goform/formSetEmail endpoint or restricting access to the config.smtp email subject parameter until a patch is available. Avoid using the config.smtp email subject parameter in the affected API endpoint until the issue is resolved.