CVE-2021-33268

D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function…

published December 1, 2021

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

⚠️ Just a single crafted POST request could trigger a stack buffer overflow in D-Link DIR-809 devices — think of it as a mischievous guest pushing too much into a suitcase until it bursts! 🎒 Imagine your friend trying to pack for a trip and cramming in way too many clothes. Eventually, the suitcase can't take it anymore and pops open — that's what happens here when excess data is sent to the device. If successfully exploited, this vulnerability could allow an attacker to inject malicious code, potentially leading to unauthorized access or control over the device. It’s like leaving your front door wide open, inviting mischief inside. While there are no known exploits currently, the risk is still present!

Put simply

Imagine your friend trying to pack for a trip and cramming in way too many clothes. Eventually, the suitcase can't take it anymore and pops open — that's what happens here when excess data is sent to the device. This vulnerability arises in the function sub_8003183C, where a stack buffer overflow occurs due to improper handling of a crafted POST request, allowing attackers to manipulate the device's memory.

What to do

If successfully exploited, this vulnerability could allow an attacker to inject malicious code, potentially leading to unauthorized access or control over the device. It’s like leaving your front door wide open, inviting mischief inside. While there are no known exploits currently, the risk is still present! To secure your D-Link DIR-809, update the firmware to the latest version, which fixes this vulnerability. Regularly check for updates and ensure that your device is configured securely to minimize exposure. You've got this! By taking these steps, you can keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04067 · 90.6th percentile
Published
2021-12-01T21:20Z
EPSS history
Timeline
  • 01 DEC 21:20Z
    D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function…
    cvelistv5