CVE-2024-51139

Summary

CVE-2024-51139 is a buffer overflow vulnerability affecting various D-Link Vigor models, including Vigor2620/LTE200, Vigor2860/2925, Vigor2862/2926, Vigor2133/2762/2832, Vigor165/166, Vigor2135/2765/2766, Vigor2865/2866/2927, Vigor2962/3910, and Vigor3912. These devices run versions 3.9.8.9 and earlier, 3.9.8 and earlier, 3.9.9.5 and earlier, 3.9.9 and earlier, 4.2.7 and earlier, 4.4.5.1 and earlier, 4.4.5.3 and earlier, 4.3.2.8/4.4.3.1 and earlier, and 4.3.6.1 and earlier, respectively. The issue stems from the CGI parser's handling of the "Content-Length" header in HTTP POST requests. A remote attacker can exploit this vulnerability by sending specially crafted packets to the affected devices, leading to arbitrary code execution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.