Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-693f-rj3p-v5v7

Опубликовано: 05 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formEasySetPassword of the file /goform/formEasySetPassword. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formEasySetPassword of the file /goform/formEasySetPassword. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 58%
0.00368
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formEasySetPassword of the file /goform/formEasySetPassword. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость функции formEasySetPassword ( /goform/formEasySetPassword) микропрограммного обеспечения маршрутизаторов D-Link DIR-605L, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 58%
0.00368
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-120