D-Link.DIR-605L.curTime.Buffer.Overflow

Description

This indicates an attack attempt to exploit a Buffer Overflow vulnerability in the D-Link DIR-605L Wi-Fi router.
The vulnerability is caused by an HTTP POST parameter 'curTime' where such parameter's size is not handled properly and may be set to an arbitrary length, thus leading to a buffer overflow. An attacker can exploit this with a constructed payload to execute arbitrary code.

Affected Products

D-Link DIR-605L version 2.13 B01

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue

References