CVE-2021-33265

D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function…

published December 1, 2021

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

⚠️ A crafted POST request is the key to unlocking chaos in D-Link DIR-809 devices! This stack buffer overflow could catch many off guard. 🔥 Think of it like a restaurant where an unsuspecting server takes a huge order that overwhelms the kitchen’s capacity — the result is a total mess! In the same way, this vulnerability allows an attacker to send too much information, causing the device to malfunction or misbehave. If exploited, an attacker could potentially take control of the device or crash it entirely, leading to significant disruption. This could put your network in jeopardy, as unauthorized access might open doors to further attacks. The stakes are high when it comes to your devices!

Put simply

Think of it like a restaurant where an unsuspecting server takes a huge order that overwhelms the kitchen’s capacity — the result is a total mess! In the same way, this vulnerability allows an attacker to send too much information, causing the device to malfunction or misbehave. This vulnerability in D-Link DIR-809 devices arises from a stack buffer overflow in the function FUN_80046eb4, triggered by a specially crafted POST request. It allows attackers to send more data than the function can handle, which can lead to unexpected behavior or execution of malicious code.

What to do

If exploited, an attacker could potentially take control of the device or crash it entirely, leading to significant disruption. This could put your network in jeopardy, as unauthorized access might open doors to further attacks. The stakes are high when it comes to your devices! To mitigate this risk, update your D-Link DIR-809 firmware to the latest version available. Regularly check for firmware updates and consider disabling remote management features if not needed. Keeping your devices patched is essential for security! You've got this! By taking these steps, you can ensure your devices are secure and keep the internet safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13720 · 96.5th percentile
Published
2021-12-01T21:20Z
EPSS history
Timeline
  • 01 DEC 21:20Z
    D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function…
    cvelistv5