CVE-2024-9910: D-Link DIR-619L B1 formSetPassword buffer overflow
A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9910?
CVE-2024-9910 is classified as a critical vulnerability due to its potential for remote exploitation and the risks associated with buffer overflow.
How do I fix CVE-2024-9910?
To mitigate CVE-2024-9910, update the D-Link DIR-619L firmware to a version that addresses this vulnerability.
Can CVE-2024-9910 be exploited remotely?
Yes, CVE-2024-9910 can be exploited remotely by manipulating the curTime argument in the formSetPassword function.
What devices are affected by CVE-2024-9910?
CVE-2024-9910 affects the D-Link DIR-619L B1 firmware version 2.06b1.
What type of attack does CVE-2024-9910 facilitate?
CVE-2024-9910 can facilitate a buffer overflow attack, potentially allowing unauthorized access or control over the affected device.