CVE-2023-29961

D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,

Critical · published May 16, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

🚨 A juicy stack overflow in D-Link DIR-605L's beta firmware just waiting for a curious mind! 🔥 Think of it as a crowded elevator that can't handle too many people — when overloaded, it could just plunge. Similarly, this vulnerability can cause the firmware to crash when fed excessive data, leading to serious instability. With this stack overflow vulnerability, an attacker could potentially execute arbitrary code, paving the way for full control over the router. This could mean exposing sensitive data, manipulating network traffic, or even knocking users offline entirely, which would be absolutely devastating! ⚠️

Put simply

Think of it as a crowded elevator that can't handle too many people — when overloaded, it could just plunge. Similarly, this vulnerability can cause the firmware to crash when fed excessive data, leading to serious instability. The vulnerability arises in the /goform/formTcpipSetup endpoint, where input is not properly validated, allowing an attacker to overflow the stack and manipulate the execution flow of the firmware.

What to do

With this stack overflow vulnerability, an attacker could potentially execute arbitrary code, paving the way for full control over the router. This could mean exposing sensitive data, manipulating network traffic, or even knocking users offline entirely, which would be absolutely devastating! ⚠️ To remediate this, immediately upgrade your firmware to the latest stable version if available and avoid using beta software in production environments. Regularly audit your network devices and ensure proper security configurations are in place. You've got this! With a few simple steps, you can secure your network and keep those pesky intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01197 · 67.9th percentile
Published
2023-05-16T00:00Z
EPSS history
Timeline
  • 16 MAY 00:00Z
    D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,
    cvelistv5