CVE-2023-39667

D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function

Critical · published August 18, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

🔥 A sneaky buffer overflow lurks in the D-Link DIR-868L, ready to spill chaos through the param_2 parameter! Think of it like a crowded elevator that's overloaded with too many people—if someone tries to force their way in, the whole system can break down, and you're left stranded! This vulnerability could lead to a catastrophic crash, allowing attackers to execute arbitrary code and take full control of the device. Imagine someone hijacking your network, snooping on your data, or even launching further attacks—all because of this single oversight!

Put simply

Think of it like a crowded elevator that's overloaded with too many people—if someone tries to force their way in, the whole system can break down, and you're left stranded! The buffer overflow vulnerability in the FUN_0000acb4 function allows an attacker to manipulate the param_2 parameter to overflow the buffer, potentially leading to remote code execution.

What to do

This vulnerability could lead to a catastrophic crash, allowing attackers to execute arbitrary code and take full control of the device. Imagine someone hijacking your network, snooping on your data, or even launching further attacks—all because of this single oversight! To safeguard your network, update your D-Link DIR-868L firmware immediately to a secure version. Regularly check for updates to ensure you’re not caught off guard by future vulnerabilities! You've got this! With a quick upgrade, you’ll turn your router from a potential target into a fortress! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01443 · 73.0th percentile
Published
2023-08-18T00:00Z
EPSS history
Timeline
  • 18 AUG 00:00Z
    D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function
    cvelistv5