PT-2024-1967 · D Link · D-Link Dir-823G

Published 2024-02-26 · Updated 2024-08-01 · CVE-2024-27662

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version A1V1.0.2B05

Description The issue is related to a function sub 4110f4() in the D-Link DIR-823G router's firmware, which contains errors in handling URL addresses with certain extensions, such as html, .asp, .php, or .Login. This can be exploited by a remote attacker to cause a Denial of Service (DoS) via crafted input. The vulnerability is due to null-pointer dereferences in the sub 4110f4() function.

Recommendations For D-Link DIR-823G version A1V1.0.2B05, as a temporary workaround, consider disabling the sub 4110f4() function until a patch is available. Restrict access to URLs with extensions that may trigger the vulnerability, such as html, .asp, .php, or .Login, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

NULL Pointer Dereference

Weakness Enumeration

CWE-755

CWE-395

CWE-476

Related Identifiers

BDU:2024-01795

CVE-2024-27662

Affected Products

D-Link Dir-823G

References · 9

• 🔥 https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x4116F0-5befc4a65457482c8c4dcb16910ab820?pvs=4 · Exploit
• https://osv.dev/vulnerability/CVE-2024-27662 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27662 · Security Note
• https://bdu.fstec.ru/vul/2024-01795 · Security Note
• https://vuldb.com/?id.255306 · Note
• https://twitter.com/CVEnew/status/1763287536309297397 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1763327728776826974 · Twitter Post
• https://t.me/cvenotify/72782 · Telegram Post
• https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x4116F0-5befc4a65457482c8c4dcb16910ab820 · Note