PT-2025-12358 · D Link · D-Link Dsl-3788

Published 2025-01-27 · Updated 2026-01-20 · CVE-2024-57440

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions D-Link DSL-3788 revA1 version 1.01R1B036 EU EN

Description The issue is related to a buffer overflow that can occur through the COMM MAKECustomMsg function of the webproc cgi. This function is part of the web procedure and can be exploited, leading to a buffer overflow.

Recommendations For D-Link DSL-3788 revA1 version 1.01R1B036 EU EN, as a temporary workaround, consider disabling the COMM MAKECustomMsg function until a patch is available. Restrict access to the webproc cgi to minimize the risk of exploitation.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-05463

CVE-2024-57440

Affected Products

D-Link Dsl-3788

References · 11

• https://bdu.fstec.ru/vul/2025-05463 · Security Note
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10418 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-57440 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57440 · Security Note
• https://t.me/cvenotify/116867 · Telegram Post
• https://t.me/cvedetector/20753 · Telegram Post
• https://blog.sparrrgh.me/fuzzing/embedded/2025/01/26/fuzzing-embedded-systems-2.html · Note
• https://twitter.com/CVEnew/status/1903336864247153085 · Twitter Post
• https://dlink.com/en/security-bulletin · Note
• https://t.me/cvetracker/19553 · Telegram Post
• https://t.me/cveNotify/149327 · Telegram Post