CVE-2024-9914: high-severity vulnerability in D-Link DIR-619L B1
D-Link DIR-619L B1 formSetWizardSelectMode buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.7%
A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
D-Link · DIR-619L B1Related CVEs — D-Link DIR-619L B1
In the same product, most dangerous first.
CVE-2024-9570HIGHD-Link DIR-619L B1 formEasySetTimezone buffer overflowEPSS 2.9%CVE-2024-9908MEDIUMD-Link DIR-619L B1 formSetMACFilter buffer overflowEPSS 2.6%CVE-2024-9909HIGHD-Link DIR-619L B1 formSetMuti buffer overflowEPSS 2.2%CVE-2024-9915HIGHD-Link DIR-619L B1 formVirtualServ buffer overflowEPSS 1.8%CVE-2024-9566HIGHD-Link DIR-619L B1 formDeviceReboot buffer overflowEPSS 1.8%CVE-2024-9913HIGHD-Link DIR-619L B1 formSetRoute buffer overflowEPSS 1.7%