CVE-2024-9783

🗓️ 10 Oct 2024 11:31:06Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Vulnerability in D-Link DIR-619L B1 2.06, allowing remote attackers to initiate buffer overflow via formLogDnsquery function, CVE-2024-978

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-9783	10 Oct 202415:05	–	circl
CNNVD	D-Link DIR-619L 安全漏洞	10 Oct 202400:00	–	cnnvd
CNVD	D-Link DIR-619L Buffer Overflow Vulnerability (CNVD-2024-40837)	13 Oct 202400:00	–	cnvd
Cvelist	CVE-2024-9783 D-Link DIR-619L B1 formLogDnsquery buffer overflow	10 Oct 202411:31	–	cvelist
EUVD	EUVD-2024-50110	3 Oct 202520:07	–	euvd
NVD	CVE-2024-9783	10 Oct 202412:15	–	nvd
OpenVAS	D-Link DIR-619L Multiple Vulnerabilities (2024 - 2025)	8 Jan 202500:00	–	openvas
OSV	CVE-2024-9783	10 Oct 202412:15	–	osv
Positive Technologies	PT-2024-7232 · D Link · D-Link Dir-619L	27 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-9783	5 Feb 202504:38	–	redhatcve

NVD

Vulners

Vulnrichment

Node

dlink dir-619l_firmwareMatch2.06

AND

dlink dir-619lMatchb1

[
  {
    "vendor": "D-Link",
    "product": "DIR-619L B1",
    "versions": [
      {
        "version": "2.06",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-619L/formLogDnsquery.md
dlink	www.dlink.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
curTime	request body	goform/formLogDnsquery	Buffer overflow in formLogDnsquery caused by manipulation of curTime parameter (CWE-120).	CWE-120

16 Oct 2024 16:43Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

CVSS 48.7

CVSS 29

CVSS 38.8

EPSS0.00268

SSVC

CWE-120