D-Link DWR-M960: Remote Code Execution through Buffer Overflow

Summary

A security flaw in a specific function of D-Link's DWR-M960 router's web interface allows an attacker to potentially take control of the device remotely. This vulnerability can be exploited using a public exploit, which means that hackers may start using it to gain unauthorized access to the device. To protect your network, update your DWR-M960 to the latest firmware version.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
dlink	dwr-m960_firmware	1.01.07	–

Original title

A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_42B5A0 of the file /boafrm/formBridgeVlan of the component Bridge VLAN Configuration Endpoint. Pe...

Original description

A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_42B5A0 of the file /boafrm/formBridgeVlan of the component Bridge VLAN Configuration Endpoint. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

nvd CVSS2.0 9.0

nvd CVSS3.1 8.8

nvd CVSS4.0 7.4

Vulnerability type

CWE-119 Buffer Overflow

CWE-121 Stack-based Buffer Overflow

https://github.com/LX-66-LX/cve-new/issues/20 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.347272 Permissions Required VDB Entry
https://vuldb.com/?id.347272 Third Party Advisory VDB Entry
https://vuldb.com/?submit.754497 Third Party Advisory VDB Entry
https://www.dlink.com/ Product