CVE-2023-26616

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jun 29, 2023
Updated: Jul 6, 2023
CWE ID 120

Summary

CVE-2023-26616 is a recently disclosed buffer overflow vulnerability affecting D-Link DIR-823G routers with firmware version 1.02B05. The issue lies in the SetParentsControlInfo function, specifically in the URL field. An attacker can exploit this vulnerability by sending maliciously crafted URL data to the router, causing a buffer overflow and potentially gaining unauthorized access or executing arbitrary code. This vulnerability poses a significant risk, as routers serve as critical infrastructure for network connectivity, and successful exploitation could lead to various negative outcomes, including unauthorized access to sensitive information or network control. It is recommended that users upgrade their router firmware to a patched version as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share