CVE-2024-9535

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 5, 2024
Updated: Oct 9, 2024
CWE ID 120

Summary

CVE-2024-9535 is a critical vulnerability affecting the D-Link DIR-605L 2.13B01 Beta firmware. The issue lies in the formEasySetupWWConfig function of the /goform/formEasySetupWWConfig file. An attacker can exploit this vulnerability by manipulating the curTime argument, resulting in a buffer overflow. This flaw can be exploited remotely, making it a significant security risk. The exploit for this vulnerability has been disclosed publicly, increasing the urgency for affected devices to be updated as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share