CVE-2024-9559

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-9559
A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formWlanSetup.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.279366 Permissions Required
https://vuldb.com/?id.279366 Third Party Advisory
https://vuldb.com/?submit.413919 Third Party Advisory
https://www.dlink.com/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*
History

08 Oct 2024, 18:37

Type Values Removed Values Added
First Time Dlink
Dlink dir-605l Firmware
Dlink dir-605l
CPE cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
References () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formWlanSetup.md - () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formWlanSetup.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.279366 - () https://vuldb.com/?ctiid.279366 - Permissions Required
References () https://vuldb.com/?id.279366 - () https://vuldb.com/?id.279366 - Third Party Advisory
References () https://vuldb.com/?submit.413919 - () https://vuldb.com/?submit.413919 - Third Party Advisory
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
Summary
  • (es) Se ha encontrado una vulnerabilidad en D-Link DIR-605L 2.13B01 BETA. Se ha clasificado como crítica. Se ve afectada la función formWlanSetup del archivo /goform/formWlanSetup. La manipulación del argumento webpage provoca un desbordamiento del búfer. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y puede utilizarse.

06 Oct 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-06 19:15

Updated : 2024-10-08 18:37

NVD link : CVE-2024-9559

Mitre link : CVE-2024-9559

CVE.ORG link : CVE-2024-9559

JSON object : View

Products Affected

dlink

  • dir-605l
  • dir-605l_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')