CVE-2023-24346: High severity d-link dir-605l firmware vulnerability

Published Feb 10, 2023

Updated

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wanconnected parameter at /goform/formEasySetupWizard3.

Affected Software

4 affected components

Dlink Dir-605l Firmware=2.13b01

Dlink Dir-605l

All of the following

Dlink Dir-605l Firmware=2.13b01

Dlink Dir-605l

Event History

Feb 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-24346?

CVE-2023-24346 is a vulnerability found in the D-Link N300 WI-FI Router DIR-605L v2.13B01 firmware that allows for a stack overflow through the wan_connected parameter.

How severe is CVE-2023-24346?

CVE-2023-24346 has a severity score of 8.8, which is considered high.

How does CVE-2023-24346 affect the D-Link N300 WI-FI Router DIR-605L?

CVE-2023-24346 affects the D-Link N300 WI-FI Router DIR-605L v2.13B01 firmware, allowing for a stack overflow via the wan_connected parameter.

What is the fix for CVE-2023-24346?

To fix CVE-2023-24346, it is recommended to update the D-Link N300 WI-FI Router DIR-605L firmware to a version that addresses the vulnerability.

Where can I find more information about CVE-2023-24346?

More information about CVE-2023-24346 can be found in the GitHub repository (https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/02) and the D-Link security bulletin (https://www.dlink.com/en/security-bulletin/).