PT-2025-31530 · D Link · Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L versions 1.12 through 1.13 Description: A stack-based buffer overflow exists in the getAuthCode function when processing CAPTCHA data. Exploitation may allow a remote attacker to execute arbitrary code with root privileges. Th...

D-Link DIR-605L Captcha Handling Buffer Overflow

This module exploits an anonymous remote code execution vulnerability on D-Link DIR-605L routers. The vulnerability exists while handling user supplied captcha information, and is due to the insecure usage of sprintf on the getAuthCode function. This module has been tested successfully on D-Link...