PT-2024-31204 · D Link · D-Link Covr-2600R

Published 2024-10-07 · Updated 2024-10-10 · CVE-2024-44674

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions D-Link COVR-2600R version FW101b05

Description The issue is related to a Buffer Overflow vulnerability. In the function sub 24E28, the HTTP REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src. This vulnerability can be exploited via the HTTP REFERER field.

Recommendations For D-Link COVR-2600R version FW101b05, as a temporary workaround, consider restricting access to the sub 24E28 function until a patch is available. Avoid using the HTTP REFERER field in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-44674

Affected Products

D-Link Covr-2600R

References · 8

• 🔥 https://github.com/REYu6/iot/blob/21e59c0cf491a9663423c515370c4fcb43436ae0/CVE/dlink/Covr-3902/2600R.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-44674 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44674 · Security Note
• https://twitter.com/vuldb/status/1843546140261920867 · Twitter Post
• https://t.me/cvedetector/7256 · Telegram Post
• https://dlink.com/en/security-bulletin · Note
• https://twitter.com/VulmonFeeds/status/1843399894045761917 · Twitter Post
• https://twitter.com/CVEnew/status/1843361718195339296 · Twitter Post