CVE Catalog

CVE-2023-39750

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
12.77%

96th percentile - higher than 96% of all known CVEs

Summary

D-Link DAP-2660 version 1.13 was found to have a buffer overflow vulnerability via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability can be exploited by sending a crafted POST request.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system or execution of malicious code, posing a serious threat to network security.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate this vulnerability and to monitor network traffic for potential attack attempts.

Original NVD description (English source)

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS