CVE Catalog

CVE-2023-39666

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.14%

62th percentile - higher than 62% of all known CVEs

Summary

D-Link DIR-842 with firmware version fw_revA_1-02_eu_multi_20151008 was found to contain multiple buffer overflows in the fgets function triggered by the acStack_120 and acStack_220 parameters.

Risk Assessment

Buffer overflows may lead to remote code execution, posing a serious security threat to the device and the network it resides in.

Recommendation

It is recommended to update the device's firmware to the latest version to mitigate these vulnerabilities and reduce the risk of attacks.

Original NVD description (English source)

D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS