CVE-2023-24343

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule...

CVE-2023-24351

The CVE affects D-Link N300 Wi‑Fi Router DIR-605L (firmware 2.13B01). The flaw is a stack overflow in the /goform/formLogin endpoint triggered by the FILECODE parameter, enabling remote code execution or denial of service as described in PT-2023-1415. There is no published fixed version; recommen...

CVE-2023-24350

Affected product: D-Link N300 Wi‑Fi Router DIR-605L (firmware version 2.13B01). Vulnerability: stack overflow triggered via the config.smtp_email_subject parameter at the /goform/formSetEmail endpoint. Multiple sources describe a high-severity issue with potential for remote code execution or ser...

CVE-2023-24344

D-Link DIR-605L (N300) router, firmware v2.13B01, is affected by a stack overflow in the web parameter at /goform/formWlanGuestSetup. The CVE-2023-24344 entry indicates potential remote code execution or service disruption with high impact (CVE-based scores include CVSS v3.1: AV:N/AC:L/PR:L/UI:N/...

CVE-2023-24347

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus...

CVE-2023-24349

The CVE-2023-24349 entry concerns the D-Link N300 Wi‑Fi Router DIR-605L, firmware v2.13B01. A stack overflow is triggered via the curTime parameter in the /goform/formSetRoute API, which may allow remote disruption or code execution per the referenced CNVD/Red Hat entries. The connected documents...

CVE-2023-24348

CVE-2023-24348 affects D-Link DIR-605L (N300 Wi‑Fi router) firmware v2.13B01, with a stack overflow in the curTime parameter processed by /goform/formSetACLFilter. The issue is described as a critical remote condition with high impact to confidentiality, integrity, and availability (CVSS 3.1: 9.8...

CVE-2023-24344

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup...

CVE-2023-24345

D-Link DIR-605L (N300), firmware v2.13B01, affected by CVE-2023-24345: a stack/buffer overflow via the curTime parameter in /goform/formSetWanDhcpplus. Public sources warn it could enable remote code execution or service disruption; no remediation details are provided in the supplied documents.

Critical Infrastructure at Risk from New Vulnerabilities Found in Wireless IIoT Devices

A set of 38 security vulnerabilities has been uncovered in wireless industrial internet of things IIoT devices from four different vendors that could pose a significant attack surface for threat actors looking to exploit operational technology OT environments. "Threat actors can exploit...

Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-5860-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5860-1 advisory. Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause...

Ubuntu 22.10 : Linux kernel vulnerabilities (USN-5850-1)

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5850-1 advisory. It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly deallocate memory in some situations. An attacker could possibly...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12109)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12109 advisory. - USB: core: Prevent nested device-reset calls Alan Stern Orabug: 34951641 CVE-2022-4662 - Bluetooth: L2CAP: Fix accepting connection request for...

CVE-2022-32656

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035...

CVE-2022-32663

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014...

CVE-2022-32655

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028...

CVE-2022-32654

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...

Design/Logic Flaw

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028...

Null pointer dereference

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014...

Design/Logic Flaw

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035...