CVE-2023-27718

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function

Critical · published April 9, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

🔥 A stack overflow bug in D-Link’s DIR878 could bring your network to its knees with just one crafted packet! Think of it as a restaurant where one bad ingredient in a dish causes the entire kitchen to shut down. The overflow in this function can lead to a full Denial of Service (DoS), leaving your devices and connections helpless, just like patrons unable to get their meals! If exploited, an attacker could not only bring down your router but potentially execute arbitrary code. This means they could take control of your device, snoop on your network, or disrupt your internet access entirely. It's an absolutely devastating prospect for home users and businesses alike!

Put simply

Think of it as a restaurant where one bad ingredient in a dish causes the entire kitchen to shut down. The overflow in this function can lead to a full Denial of Service (DoS), leaving your devices and connections helpless, just like patrons unable to get their meals! CVE-2023-27718 reveals a stack overflow vulnerability in the sub_498308 function of the D-Link DIR878, allowing unauthorized attacks through specially crafted payloads that can lead to DoS or remote code execution.

What to do

If exploited, an attacker could not only bring down your router but potentially execute arbitrary code. This means they could take control of your device, snoop on your network, or disrupt your internet access entirely. It's an absolutely devastating prospect for home users and businesses alike! Immediate action is essential—update your D-Link DIR878 router firmware to version 1.30B09 or later to close this vulnerability. Additionally, consider disabling any unnecessary services and reviewing access controls to minimize exposure. You've got this! Following these steps will help secure your network and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01403 · 72.3th percentile
Published
2023-04-09T00:00Z
EPSS history
Timeline
  • 09 APR 00:00Z
    D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function
    cvelistv5