CVE-2023-24350

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject parameter at /goform/formSetEmail

Critical · published February 10, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in the D-Link N300 WI-FI Router could let attackers seize control with just a single misconfigured email setting! 🔥 Think of it like a restaurant that accepts an infinitely long order from a customer. Instead of politely asking for a reasonable meal, the staff just keeps adding to the list until the kitchen overflows with chaos! An attacker could exploit this flaw to inject malicious code into the router's memory, potentially allowing them complete control over your device. This could lead to unauthorized access to your network, interception of personal data, and even the ability to further compromise connected devices. It's a recipe for disaster!

Put simply

Think of it like a restaurant that accepts an infinitely long order from a customer. Instead of politely asking for a reasonable meal, the staff just keeps adding to the list until the kitchen overflows with chaos! The vulnerability arises from a stack overflow triggered via the config.smtp_email_subject parameter in the router's configuration interface, allowing an attacker to execute arbitrary code remotely.

What to do

An attacker could exploit this flaw to inject malicious code into the router's memory, potentially allowing them complete control over your device. This could lead to unauthorized access to your network, interception of personal data, and even the ability to further compromise connected devices. It's a recipe for disaster! Immediate action is crucial! Update your D-Link N300 router to version 2.13B02 to patch this vulnerability. Additionally, consider disabling remote management features to reduce exposure while you implement the update. 🛡️ You've got this! Stay vigilant, secure your network, and you'll be a cyber hero in no time! 🦸

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01191 · 67.7th percentile
Published
2023-02-10T00:00Z
EPSS history
Timeline
  • 10 FEB 00:00Z
    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject parameter at /goform/formSetEmail
    cvelistv5