Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-45695

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.

Published

2024-09-16T07:15:02.840

Last Modified

2024-09-17T18:40:38.573

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Secondary
CWE-121
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	dlink	dir-x4860_firmware	1.00	Yes
Operating System	dlink	dir-x4860_firmware	1.04	Yes
Hardware	dlink	dir-x4860	a1	No

References

https://www.twcert.org.tw/en/cp-139-8083-a299e-2.html Third Party Advisory ([email protected])
https://www.twcert.org.tw/tw/cp-132-8082-f1687-1.html Third Party Advisory ([email protected])