CVE-2024-22751

D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function

Critical · published January 24, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

🔥 A stack overflow in the D-Link DIR-882 router could let attackers exploit a single function call to gain control of your device! Think of this like a busy restaurant where the chef has an overflowing pot of soup that spills everywhere—if it gets too full, it can cause chaos in the kitchen! In this case, the sub_477AA0 function is that pot, and if it overflows, an attacker can slip right in. An attacker could potentially execute arbitrary code, turning your router into a launchpad for more sinister activities. This means they could intercept your data, spy on your network, or even disable your device entirely, leading to a catastrophic impact on your security!

Put simply

Think of this like a busy restaurant where the chef has an overflowing pot of soup that spills everywhere—if it gets too full, it can cause chaos in the kitchen! In this case, the sub_477AA0 function is that pot, and if it overflows, an attacker can slip right in. This vulnerability arises from improper handling of data within the sub_477AA0 function, leading to a stack overflow that can be exploited to execute malicious code.

What to do

An attacker could potentially execute arbitrary code, turning your router into a launchpad for more sinister activities. This means they could intercept your data, spy on your network, or even disable your device entirely, leading to a catastrophic impact on your security! Immediate patching is essential! Update your D-Link DIR-882 firmware to the latest version available, and ensure that your router is configured securely. Regularly check for updates to stay protected against new vulnerabilities. You've got this! By taking these steps, you’ll bolster your defenses and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01183 · 67.5th percentile
Published
2024-01-24T00:00Z
EPSS history
Timeline
  • 24 JAN 00:00Z
    D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function
    cvelistv5