CVE-2024-9555

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 6, 2024
Updated: Oct 8, 2024
CWE ID 120

Summary

CVE-2024-9555 is a critical vulnerability affecting the D-Link DIR-605L 2.13B01 BETA router. The issue lies within the function formSetEasy_Wizard in the /goform/formSetEasy_Wizard file. An attacker can exploit this vulnerability by manipulating the argument curTime, resulting in a buffer overflow. This flaw allows remote attacks and the exploit has been made public, increasing the risk for potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share