PT-2024-1693 · D Link · D-Link Go-Rt-Ac750

Published 2024-02-05 · Updated 2024-02-13 · CVE-2024-22852

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link Go-RT-AC750 version GORTAC750 A1 FW v101b03

Description The issue is related to a stack-based buffer overflow via the genacgi main function. This allows attackers to enable telnet service by sending a specially crafted payload, potentially enabling remote execution of arbitrary commands.

Recommendations For version GORTAC750 A1 FW v101b03, consider disabling the genacgi main function as a temporary workaround until a patch is available. Restrict access to the telnet service to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-01381

CVE-2024-22852

Affected Products

D-Link Go-Rt-Ac750

References · 6

• 🔥 https://github.com/Beckaf/vunl/blob/main/D-Link/AC750/1/1.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-22852 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01381 · Security Note
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22852 · Security Note
• https://twitter.com/CVEnew/status/1754686023580479904 · Twitter Post