Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-44674


D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src.


Published

2024-10-07T18:15:04.590

Last Modified

2025-05-21T14:51:38.190

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-121

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dlink covr-2600r_firmware 1.01b05 Yes
Hardware dlink covr-2600r - No

References