CVE-2024-57376

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jan 28, 2025
Updated: Jan 29, 2025
CWE ID 120

Summary

CVE-2024-57376 is a newly identified buffer overflow vulnerability affecting select D-Link DSR models, including the DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, and DSR-1000N. These devices run software versions from 3.13 to 3.17B901C. An unauthenticated attacker can exploit this flaw, leading to remote code execution. By sending specially crafted packets, the attacker can overflow the targeted buffer, causing unexpected behavior and potential execution of malicious code on the device. This vulnerability poses a significant risk and requires immediate attention and patching from affected users.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • D-Link DSR 1000N

Affected Vendors

  • D-Link Corporation