360 Code Guard help D-LINK to fix multiple high-risk vulnerability brief technical analysis-vulnerability warning-the black bar safety net

Recently, the 360 Enterprise Security Group Code Guard team of security researchers found that the Friends newsD-LINKthe company's product line DIR-619, THE DIR-605 series routers and two high-risk security vulnerabilityCVE-2018-20056 and CVE-2018-20057, and the first time to the Friends of the...

CVE-2018-20056

CVE-2018-20056 affects D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1. The flaw is a stack-based buffer overflow in the /bin/boa web server, triggered by POST requests to goform/formLanguageChange with the currTime parameter, allowing unauthenticated remote code execution. Multiple source...