CVE-2023-24350: Critical severity d-link dir-605l firmware vulnerability

Published Feb 10, 2023

Updated

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtpemailsubject parameter at /goform/formSetEmail.

Affected Software

4 affected components

Dlink Dir-605l Firmware=2.13b01

Dlink Dir-605l

All of the following

Dlink Dir-605l Firmware=2.13b01

Dlink Dir-605l

Event History

Feb 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-24350?

The severity of CVE-2023-24350 is critical with a CVSS score of 9.8.

How does CVE-2023-24350 affect D-Link N300 WI-FI Router DIR-605L v2.13B01?

CVE-2023-24350 affects D-Link N300 WI-FI Router DIR-605L v2.13B01 by exploiting a stack overflow vulnerability in the config.smtp_email_subject parameter.

Is D-Link N300 WI-FI Router DIR-605L v2.13B01 the only affected software version?

Yes, D-Link N300 WI-FI Router DIR-605L v2.13B01 is the only affected software version of the Dlink Dir-605l Firmware.

How can I fix the stack overflow vulnerability in D-Link N300 WI-FI Router DIR-605L v2.13B01?

To fix the stack overflow vulnerability in D-Link N300 WI-FI Router DIR-605L v2.13B01, update to a patched version of the firmware provided by D-Link.

Where can I find more information about CVE-2023-24350?

More information about CVE-2023-24350 can be found at the following references: - GitHub: https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/03 - D-Link Security Bulletin: https://www.dlink.com/en/security-bulletin/