CVE-2022-36525

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main

published August 15, 2022

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow is hiding in D-Link's Go-RT-AC750 routers! Just one incorrectly sized input to the authentication script could let attackers run wild. 🔥 Think of a buffer overflow like trying to pack too many bags into a car trunk — instead of neatly fitting, everything spills out and chaos ensues! In this case, the overflow could allow an attacker to mess with the router's memory, possibly leading to unexpected behavior. If exploited, an attacker could potentially gain control over the router, allowing them to manipulate network traffic, intercept data, or even launch further attacks on connected devices. This could lead to absolutely devastating consequences for users' privacy and security!

Put simply

Think of a buffer overflow like trying to pack too many bags into a car trunk — instead of neatly fitting, everything spills out and chaos ensues! In this case, the overflow could allow an attacker to mess with the router's memory, possibly leading to unexpected behavior. This vulnerability exists in the Go-RT-AC750 routers due to a flaw in the authenticationcgi_main function, where excessive input can overflow the allocated buffer, leading to potential remote code execution.

What to do

If exploited, an attacker could potentially gain control over the router, allowing them to manipulate network traffic, intercept data, or even launch further attacks on connected devices. This could lead to absolutely devastating consequences for users' privacy and security! To protect yourself, it’s crucial to update your router firmware to the latest versions (GORTAC750_revA_v101b03 or GO-RT-AC750_revB_FWv200b02). Additionally, consider reviewing your router's configurations and disabling any unnecessary services to minimize exposure. You've got the power to safeguard your connections! Stay proactive, update that firmware, and keep your network secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01625 · 76.0th percentile
Published
2022-08-15T16:36Z
EPSS history
Timeline
  • 15 AUG 16:36Z
    D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main
    cvelistv5