CVE-2023-26616
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-26616 is a recently disclosed buffer overflow vulnerability affecting D-Link DIR-823G routers with firmware version 1.02B05. The issue lies in the SetParentsControlInfo function, specifically in the URL field. An attacker can exploit this vulnerability by sending maliciously crafted URL data to the router, causing a buffer overflow and potentially gaining unauthorized access or executing arbitrary code. This vulnerability poses a significant risk, as routers serve as critical infrastructure for network connectivity, and successful exploitation could lead to various negative outcomes, including unauthorized access to sensitive information or network control. It is recommended that users upgrade their router firmware to a patched version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- D LINK SYSTEMS INC
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions