CVE-2024-9552
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Oct 6, 2024
Updated: Oct 9, 2024
CWE ID 120
Summary
CVE-2024-9552 is a critical vulnerability affecting the D-Link DIR-605L 2.13B01 Beta firmware. The issue lies within the function formSetWanNonLogin in the /goform/formSetWanNonLogin file. An attacker can exploit this buffer overflow vulnerability by manipulating the webpage argument. Since this vulnerability has been disclosed to the public, remote attacks are possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- D LINK SYSTEMS INC