CVE-2023-24348: Critical severity d-link dir-605l firmware vulnerability

Published Feb 10, 2023

Updated

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter.

Affected Software

4 affected components

Dlink Dir-605l Firmware=2.13b01

Dlink Dir-605l

All of the following

Dlink Dir-605l Firmware=2.13b01

Dlink Dir-605l

Event History

Feb 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-24348?

The severity of CVE-2023-24348 is critical with a CVSS score of 9.8.

How does CVE-2023-24348 affect D-Link N300 WI-FI Router DIR-605L?

CVE-2023-24348 affects D-Link N300 WI-FI Router DIR-605L firmware version 2.13B01.

What is the vulnerability in CVE-2023-24348?

The vulnerability in CVE-2023-24348 is a stack overflow in the curTime parameter of the /goform/formSetACLFilter endpoint of D-Link N300 WI-FI Router DIR-605L firmware.

Is D-Link DIR-605L vulnerable to CVE-2023-24348?

Yes, D-Link DIR-605L with firmware version 2.13B01 is vulnerable to CVE-2023-24348.

How can I find more information about CVE-2023-24348?

You can find more information about CVE-2023-24348 at the following references: [https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/02](https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/02) and [https://www.dlink.com/en/security-bulletin/](https://www.dlink.com/en/security-bulletin/)