CVE-2024-22916

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22916
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://kee02p.github.io/2024/01/13/CVE-2024-22916/ Exploit Third Party Advisory
https://www.dlink.com/en/security-bulletin/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:go-rt-ac750_firmware:101b03:*:*:*:*:*:*:*
cpe:2.3:h:dlink:go-rt-ac750:-:*:*:*:*:*:*:*
History

24 Jan 2024, 17:04

Type Values Removed Values Added
First Time Dlink
Dlink go-rt-ac750 Firmware
Dlink go-rt-ac750
CPE cpe:2.3:h:dlink:go-rt-ac750:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:go-rt-ac750_firmware:101b03:*:*:*:*:*:*:*
Summary
  • (es) En D-LINK Go-RT-AC750 v101b03, la función sprintf en la función sub_40E700 dentro de cgibin es susceptible al desbordamiento de pila.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-787
References () https://kee02p.github.io/2024/01/13/CVE-2024-22916/ - () https://kee02p.github.io/2024/01/13/CVE-2024-22916/ - Exploit, Third Party Advisory
References () https://www.dlink.com/en/security-bulletin/ - () https://www.dlink.com/en/security-bulletin/ - Product

16 Jan 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-16 22:15

Updated : 2024-01-24 17:04

NVD link : CVE-2024-22916

Mitre link : CVE-2024-22916

CVE.ORG link : CVE-2024-22916

JSON object : View

Products Affected

dlink

  • go-rt-ac750_firmware
  • go-rt-ac750
CWE
CWE-787

Out-of-bounds Write