CVE-2023-24799

D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in the D-Link DIR878 firmware could turn your router into a paperweight! 🔥 Think of this vulnerability like a clogged sink: too much pressure from an overflowing system could cause a massive overflow, halting everything in its tracks. An attacker can use a specially crafted payload to force the router to crash or even take control, like a plumber flooding your house because they ignored the warning signs. If exploited, this vulnerability can lead to a Denial of Service (DoS), meaning your router could just stop working altogether — no internet, no access, and a pretty frustrating day for everyone at home. Even worse, it could allow an attacker to run arbitrary code, giving them the keys to your network kingdom. Yikes!

Put simply

Think of this vulnerability like a clogged sink: too much pressure from an overflowing system could cause a massive overflow, halting everything in its tracks. An attacker can use a specially crafted payload to force the router to crash or even take control, like a plumber flooding your house because they ignored the warning signs. The vulnerability exists in the sub_48AF78 function of the D-Link DIR878 firmware, where a stack overflow can be triggered by an attacker sending a malicious payload, potentially leading to a crash or remote code execution.

What to do

If exploited, this vulnerability can lead to a Denial of Service (DoS), meaning your router could just stop working altogether — no internet, no access, and a pretty frustrating day for everyone at home. Even worse, it could allow an attacker to run arbitrary code, giving them the keys to your network kingdom. Yikes! Immediately update your D-Link DIR878 to firmware version DIR_878_FW120B06 or later to patch this vulnerability. Make sure to regularly check for firmware updates to keep your devices secure. Don't forget to review your network security settings! You’ve got this! Follow the steps, and your network will be back in superhero mode in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01108 · 65.6th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function
    cvelistv5