CVE-2024-22852

D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main

Critical · published February 6, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

🔥 A stack-based buffer overflow in D-Link's Go-RT-AC750 router makes it ridiculously easy for attackers to activate telnet with just a crafted payload! Think of it like a sneaky contractor who finds a loophole in your firewall and waltzes into your home, turning on the lights without you even knowing it! If exploited, this vulnerability could grant attackers full remote access to your router, allowing them to snoop on your network traffic, change configurations, or even hijack other devices. Imagine the chaos when intruders can sit back and control your entire network without breaking a sweat!

Put simply

Think of it like a sneaky contractor who finds a loophole in your firewall and waltzes into your home, turning on the lights without you even knowing it! This vulnerability resides in the genacgi_main function of the D-Link Go-RT-AC750 firmware, enabling attackers to perform a stack-based buffer overflow that activates the telnet service without authorization.

What to do

If exploited, this vulnerability could grant attackers full remote access to your router, allowing them to snoop on your network traffic, change configurations, or even hijack other devices. Imagine the chaos when intruders can sit back and control your entire network without breaking a sweat! Immediately patch your firmware to version v101b04 or later to close this critical gap. Additionally, consider disabling telnet access altogether if it's not needed—better safe than sorry! You've got this! Follow these steps, and you'll keep your network fortress strong and secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01079 · 64.8th percentile
Published
2024-02-06T00:00Z
EPSS history
Timeline
  • 06 FEB 00:00Z
    D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main
    cvelistv5