PT-2024-1948 · D Link · D-Link Dir-823G

Published 2024-02-26 · Updated 2025-04-21 · CVE-2024-27656

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version A1V1.0.2B05

Description The issue is related to a buffer overflow in the sub 41D354() function of the D-Link DIR-823G router's firmware when handling the Cookie parameter. This can allow a remote attacker to execute arbitrary code or cause a Denial of Service (DoS) via a crafted input.

Recommendations For D-Link DIR-823G version A1V1.0.2B05, consider disabling the sub 41D354() function until a patch is available to prevent exploitation. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the Cookie parameter in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

CWE-120

Related Identifiers

BDU:2024-01745

CVE-2024-27656

Affected Products

D-Link Dir-823G

References · 10

• 🔥 https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E2A0-8ea57277c7cd4ea18dbc40bcb41a98f2?pvs=4 · Exploit
• https://osv.dev/vulnerability/CVE-2024-27656 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27656 · Security Note
• https://bdu.fstec.ru/vul/2024-01745 · Security Note
• https://twitter.com/VulmonFeeds/status/1763330259498176769 · Twitter Post
• https://t.me/cvenotify/119268 · Telegram Post
• https://vuldb.com/ru/?id.255312 · Note
• https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E2A0-8ea57277c7cd4ea18dbc40bcb41a98f2 · Note
• https://t.me/cvenotify/72776 · Telegram Post
• https://twitter.com/CVEnew/status/1763287529271226629 · Twitter Post