Vulnerability · Published Aug 19, 2024 · Assigned by mitre
CVE-2024-42812
Critical 9.8
In plain English
A critical-severity buffer overflow in the affected software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 15.5% (higher than 97% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)15.5%top 3.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
Affected products (as reported)
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H