CVE-2024-9567

Summary

CVE-2024-9567 is a critical vulnerability affecting the D-Link DIR-619L B1 version 2.06, specifically in the formAdvFirewall function, where a buffer overflow can be exploited through remote manipulation of the curTime argument. This vulnerability poses significant risks to an organization as it can lead to high impacts on confidentiality, integrity, and availability of affected systems. Remediation recommendations include applying any available firmware updates from D-Link and restricting network access to vulnerable devices. The exploit has been publicly disclosed, increasing the urgency for organizations to address this issue promptly. The vulnerability has a CVSS score of 8.8, indicating its severity and ease of exploitation with low privileges required for attack initiation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.