CVE-2024-9914

Summary

CVE-2024-9914 is a critical vulnerability affecting the D-Link DIR-619L B1 version 2.06, specifically in the function formSetWizardSelectMode, which can lead to a buffer overflow due to improper handling of the argument curTime. This vulnerability allows for remote exploitation with low complexity, posing significant risks to an organization by potentially compromising confidentiality, integrity, and availability. The impact scores indicate high potential damage with a base severity rating of 8.8. To remediate this issue, organizations should apply any available firmware updates from D-Link promptly to mitigate the risk of exploitation. Users are advised to monitor their network for unusual activity that may indicate attempts to exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.