CVE-2024-9566

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 7, 2024
Updated: Oct 9, 2024
CWE ID 120

Summary

CVE-2024-9566 is a critical buffer overflow vulnerability identified in the D-Link DIR-619L B1 2.06 firmware. The issue lies in the function formDeviceReboot of the file /goform/formDeviceReboot, which can be exploited by manipulating the argument next_page. This vulnerability enables remote attackers to cause a buffer overflow, potentially gaining unauthorized access or causing denial-of-service conditions. The exploit for this vulnerability has been made public, increasing the risk of potential attacks. Users are strongly encouraged to update their firmware as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share