CVE-2024-37606

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Dec 17, 2024
CWE ID 120

Summary

CVE-2024-37606 is a newly identified stack overflow vulnerability affecting D-Link DCS-932L cameras with REVB firmware version 2.18.01. An attacker can exploit this flaw by sending a specially crafted HTTP request, resulting in a denial of service (DoS) condition. The vulnerability occurs due to improper input validation, allowing malicious data to cause the stack to overflow and crash the device. This issue may impact the availability of affected cameras, making it essential for users to apply the necessary software updates as soon as they become available.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share