CVE-2024-11047

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 10, 2024
Updated: Nov 13, 2024
CWE ID 119
CWE ID 121

Summary

CVE-2024-11047 is a critical vulnerability affecting D-Link DI-8003 devices running the 16.07.16A1 firmware. This issue lies in the function upgrade_filter_asp of the file /upgrade_filter.asp, which is susceptible to stack-based buffer overflow due to improper handling of the path argument. Malicious actors can remotely exploit this vulnerability and manipulate the affected system. The exploit for this issue has been made public, increasing the risk of potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share