CVE-2024-5293

CVSS V2 None CVSS V3 None

Description

D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640-US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within prog.cgi, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21853.

Overview

CVE ID
CVE-2024-5293

Assigner
zdi

Vulnerability Status
PUBLISHED

Published Version
2024-05-23T21:29:44.062Z

Last Modified Date
2024-06-04T18:02:34.964Z

Weakness Enumerations

CWE	URL
CWE-121	http://cwe.mitre.org/data/definitions/121.html

References

Reference URL	Reference Tags
https://www.zerodayinitiative.com/advisories/ZDI-24-444/	x_research-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-5293
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5293

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 03:06:55				Added to TrackCVE