CVE-2023-27719

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function

Critical · published April 9, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

🚨 A stack overflow in D-Link DIR878 could turn your network into a digital ghost town! 🔥 Think of this vulnerability like a traffic jam caused by an unexpected roadblock. Just one crafty payload can halt all data flow, causing chaos in your network as if all cars were stuck in gridlock with no way out. This flaw allows attackers to launch a Denial of Service (DoS) attack, completely crippling your router's ability to function. They could also execute arbitrary code, leading to a potential takeover of your device. It's a nightmare scenario where your internet service could be rendered useless!

Put simply

Think of this vulnerability like a traffic jam caused by an unexpected roadblock. Just one crafty payload can halt all data flow, causing chaos in your network as if all cars were stuck in gridlock with no way out. The vulnerability in the D-Link DIR878 stems from a stack overflow in the sub_478360 function, allowing for arbitrary code execution or DoS via specially crafted payloads.

What to do

This flaw allows attackers to launch a Denial of Service (DoS) attack, completely crippling your router's ability to function. They could also execute arbitrary code, leading to a potential takeover of your device. It's a nightmare scenario where your internet service could be rendered useless! Update your D-Link DIR878 to the latest firmware version immediately to close this critical vulnerability. Regularly check for firmware updates and ensure your network is configured securely to minimize risks. You've got this! Follow these steps, and you'll have your defenses up in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01403 · 72.4th percentile
Published
2023-04-09T00:00Z
EPSS history
Timeline
  • 09 APR 00:00Z
    D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function
    cvelistv5