CVE-2023-24798

D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

🚨 A single crafted payload is all it takes to unleash chaos! The D-Link DIR878 has a stack overflow lurking in its code, ready to be exploited for a Denial of Service or worse. 🔥 Think of it like a factory assembly line that's overwhelmed by a sudden influx of faulty parts — it grinds to a halt, unable to process anything until the mess is cleared. This vulnerability allows attackers to derail your router’s operations in a similar way, potentially bringing your network to a standstill. An attacker could exploit this flaw to crash the router, causing a complete Denial of Service that disrupts your internet access. If they’re feeling particularly crafty, they could even execute arbitrary code, which means your router could be turned into a puppet for malicious activities!

Put simply

Think of it like a factory assembly line that's overwhelmed by a sudden influx of faulty parts — it grinds to a halt, unable to process anything until the mess is cleared. This vulnerability allows attackers to derail your router’s operations in a similar way, potentially bringing your network to a standstill. This stack overflow vulnerability in the D-Link DIR878 occurs in the sub_475FB0 function, where improperly handled input can lead to memory corruption, allowing attackers to manipulate the device's behavior.

What to do

An attacker could exploit this flaw to crash the router, causing a complete Denial of Service that disrupts your internet access. If they’re feeling particularly crafty, they could even execute arbitrary code, which means your router could be turned into a puppet for malicious activities! Immediately patch your D-Link DIR878 to the latest firmware version (DIR_878_FW120B06 or later) to fix this vulnerability. Consider implementing additional network security measures like firewalls and intrusion detection systems for added protection. You've got this! By following these steps, you'll not only safeguard your network, but you'll also earn your hero badge in the battle against vulnerabilities! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01108 · 65.6th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function
    cvelistv5