CVE-2023-24349

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute

Critical · published February 10, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the D-Link N300 router means your internet's security could be a ticking time bomb! 🔥 Think of it like a traffic jam caused by a single car that just won't stop. This router can be overloaded by the curTime parameter, essentially letting an attacker bring the whole system to a standstill, causing potential chaos in your home network. An attacker could exploit this vulnerability to gain control over your router, potentially redirecting web traffic, stealing sensitive data, or even launching attacks on other devices in your home. That means a compromised internet experience that can lead to absolutely devastating consequences for your personal and sensitive information!

Put simply

Think of it like a traffic jam caused by a single car that just won't stop. This router can be overloaded by the curTime parameter, essentially letting an attacker bring the whole system to a standstill, causing potential chaos in your home network. This stack overflow vulnerability arises from improper handling of the curTime parameter at /goform/formSetRoute, allowing for potential code execution or manipulation of the router's operations due to excessive data being processed.

What to do

An attacker could exploit this vulnerability to gain control over your router, potentially redirecting web traffic, stealing sensitive data, or even launching attacks on other devices in your home. That means a compromised internet experience that can lead to absolutely devastating consequences for your personal and sensitive information! To safeguard your network, update the firmware of your D-Link N300 router to the latest version immediately. It's crucial to remove any unnecessary functionalities and review your router's configuration for any additional security measures. You've got this! Fixing this issue will enhance your security and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01191 · 67.7th percentile
Published
2023-02-10T00:00Z
EPSS history
Timeline
  • 10 FEB 00:00Z
    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute
    cvelistv5