CVE-2023-27720

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function

Critical · published April 9, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow in D-Link DIR878 could leave your network flat on its back! 🔥 Think of it like a traffic jam caused by a car that just won't budge — as the requests pile up, the entire road gets blocked and no one can get through. In this case, a crafty attacker can flood the system with a special payload, causing a Denial of Service (DoS) and potentially executing code. If left unpatched, an attacker could bring your entire network to a standstill. This means loss of connectivity for all devices on the network, disruption of services, and the potential for unauthorized access to sensitive data. An absolute nightmare scenario for anyone relying on this router!

Put simply

Think of it like a traffic jam caused by a car that just won't budge — as the requests pile up, the entire road gets blocked and no one can get through. In this case, a crafty attacker can flood the system with a special payload, causing a Denial of Service (DoS) and potentially executing code. This vulnerability arises from a stack overflow in the `sub_48d630` function, enabling attackers to either crash the device or execute arbitrary code by sending a carefully crafted payload.

What to do

If left unpatched, an attacker could bring your entire network to a standstill. This means loss of connectivity for all devices on the network, disruption of services, and the potential for unauthorized access to sensitive data. An absolute nightmare scenario for anyone relying on this router! To protect your devices, immediately update the D-Link DIR878 firmware to version 1.30B09 or higher. Regularly check for firmware updates and consider changing your router's default settings to enhance security. Don't wait for the storm to hit! You've got this! By taking these steps, you'll be well on your way to securing your network and earning your security hero badge! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01352 · 71.3th percentile
Published
2023-04-09T00:00Z
EPSS history
Timeline
  • 09 APR 00:00Z
    D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function
    cvelistv5