CVE-2024-9911
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Oct 13, 2024
Updated: Oct 16, 2024
CWE ID 120
Summary
CVE-2024-9911 is a newly disclosed critical vulnerability affecting the D-Link DIR-619L B1 2.06 router. The issue lies within the function formSetPortTr of the /goform/formSetPortTr file. An attacker can exploit this vulnerability by manipulating the argument curTime, resulting in a buffer overflow. The exploit can be initiated remotely, making this a significant security risk. Public disclosure of the exploit means that malicious actors may already be targeting affected devices.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- D LINK SYSTEMS INC