CVE-2024-9782 in DIR-619L B1

Summary

by MITRE • 10/10/2024

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the function formEasySetupWWConfig of the file /goform/formEasySetupWWConfig. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Disclosure: 10/10/2024
• Moderation: accepted
• Entry: VDB-279934
• CPE: ready
• CWE: CWE-120 (confirmed)
• Exploit: Download
• CVSS: 8.8 (VulDB)
• EPSS: 0.00325
• KEV: no
• Activities: very low
• Sector: Finance, Agriculture, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-9782
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-9782
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-9782/