CVE-2023-39665

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter

published August 18, 2023

CVSS
—
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow is hiding in the D-Link DIR-868L! When the acStack_50 parameter is involved, there’s no telling what could happen next! Think of it like a restaurant kitchen — if a chef adds ingredients to a pot without checking the recipe, it might overflow and create a messy disaster! In this case, the acStack_50 parameter is the chef stirring the pot without a clear instruction, leading to potential chaos. An attacker could exploit this buffer overflow to manipulate the router’s behavior or crash the device entirely. While there’s currently no known exploitation, it poses an underlying risk that could lead to unauthorized access or disruptions in your home network.

Put simply

Think of it like a restaurant kitchen — if a chef adds ingredients to a pot without checking the recipe, it might overflow and create a messy disaster! In this case, the acStack_50 parameter is the chef stirring the pot without a clear instruction, leading to potential chaos. This vulnerability arises from improper handling of the acStack_50 input, allowing an attacker to overflow the buffer memory and potentially execute arbitrary code or cause service interruption.

What to do

An attacker could exploit this buffer overflow to manipulate the router’s behavior or crash the device entirely. While there’s currently no known exploitation, it poses an underlying risk that could lead to unauthorized access or disruptions in your home network. To safeguard your device, update your D-Link DIR-868L firmware to the latest version as soon as it’s available. Regularly check for updates and change any default credentials to enhance security. You’ve got this! Stay vigilant and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01443 · 73.1th percentile
Published
2023-08-18T00:00Z
EPSS history
Timeline
  • 18 AUG 00:00Z
    D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter
    cvelistv5