CVE-2024-9782

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 10, 2024
Updated: Oct 16, 2024
CWE ID 120

Summary

CVE-2024-9782 is a newly disclosed critical vulnerability affecting the D-Link DIR-619L B1 2.06 router. The issue lies in the function formEasySetupWWConfig of the file /goform/formEasySetupWWConfig, where the argument curTime can be manipulated to cause a buffer overflow. This vulnerability enables remote attackers to exploit the system, making it a significant security concern. The exploit for this vulnerability has already been disclosed to the public, increasing the risk for potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share