PT-2026-86570

CVE-2026-86297

Published

2026-09-06

Updated

2026-09-12

Description by

CVSS 3.1

8.1

High

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-605 B1v202WWB03

Description An off-by-one error exists in the L2TP Control Message Parser within the tunnel set params() function of the progs.gpl/pppd.alpha/l2tp/tunnel.c file. A remote attacker can trigger this issue by manipulating the peer hostname argument. This type of attack is considered highly complex and difficult to execute.

Recommendations Update the D-Link DIR-605 B1v202WWB03 to a patched version or replace the affected device.

Exploitability

Exploit

Fix

Researchers

Tian

Vendors

Affected products

Weakness enumeration

CWE-193: Off-by-one Error

CWE-189

Related identifiers