CVE-2024-11047: D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp stack-based overflow

Published Nov 10, 2024

Updated

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgradefilterasp of the file /upgradefilter.asp. The manipulation of the argument path leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

All of the following

Dlink Di-8003 Firmware=16.07.16a1

Dlink DI-8003=a1

Event History

Nov 10, 2024

CVE Published

via MITRE·03:31 AM

Data Sourced

via MITRE·03:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-11047?

CVE-2024-11047 has been declared as critical severity due to the stack-based buffer overflow it causes.

How do I fix CVE-2024-11047?

To mitigate CVE-2024-11047, update the D-Link DI-8003 firmware to a version that addresses this vulnerability.

What devices are affected by CVE-2024-11047?

CVE-2024-11047 affects the D-Link DI-8003 firmware version 16.07.16A1.

What type of vulnerability is CVE-2024-11047?

CVE-2024-11047 is classified as a stack-based buffer overflow vulnerability.

How can exploiting CVE-2024-11047 impact my system?

Exploitation of CVE-2024-11047 could allow an attacker to execute arbitrary code on the affected device.