CVE-2024-44674

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

D-Link COVR-2600R Buffer Overflow Vulnerability

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

CVE-2024-44674

The D-Link COVR-2600R wireless router, specifically on firmware FW101b05 , is vulnerable to a Buffer Overflow (specifically a Stack-based Buffer Overflow ). The root cause is located in the function sub_24E28 , where the HTTP_REFERER is retrieved via an environment variable. Because this field is...

PT-2024-31204

Name of the Vulnerable Software and Affected Versions D-Link COVR-2600R version FW101b05 Description The issue is related to a Buffer Overflow vulnerability. In the function sub 24E28, the HTTP REFERER is obtained through an environment variable, and this field is controllable, allowing it to be...

D-Link COVR-2600R security vulnerability

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

CVE-2024-44674

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

CVE-2024-44674: Stack-based Buffer Overflow

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

CVE-2018-20432: Use of Hard-coded Credentials

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration...