Description
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| D-Link | DIR-605L | 2.13B01 |
| d-link | dir-605l | 2.13B01 |
References
- https://github.com/offshore0315/loT-vulnerable/blob/main/D-Link/formSetPortTr.mdExploit, Third Party Advisory
- https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10393Vendor Advisory
- https://vuldb.com/?ctiid.286342Permissions Required, VDB Entry
- https://vuldb.com/?id.286342Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.447485Third Party Advisory, VDB Entry
- https://www.dlink.com/Product
Timeline
- Published
- Nov 28, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed