CVE-2024-42812
Last modified
CVE-2024-42812 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.. EPSS estimates a 15.51% chance of exploitation in the next 30 days.
Description
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-860l Firmware | 2.0.3 |
References
- https://gist.github.com/XiaoCurry/574ed9c2b0d12cd0b45399116d82121cExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-42812?
How severe is CVE-2024-42812?
How do I fix CVE-2024-42812?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-42795An Incorrect Access Control vulnerability was found in /musi…4.2
- CVE-2024-42796An Incorrect Access Control vulnerability was found in /musi…5.9
- CVE-2024-42797An Incorrect Access Control vulnerability was found in /musi…9.8
- CVE-2024-42798An Incorrect Access Control vulnerability was found in /musi…7.6
- CVE-2024-4280The White Label CMS plugin for WordPress is vulnerable to un…5.3
- CVE-2024-4281The Link Library plugin for WordPress is vulnerable to Store…5.4
- CVE-2024-42813In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow…9.8
- CVE-2024-42815In the TP-Link RE365 V1_180213, there is a buffer overflow v…9.8
- CVE-2024-42816A cross-site scripting (XSS) vulnerability in the Create Pro…6.1
- CVE-2024-42818A cross-site scripting (XSS) vulnerability in the Config-Cre…6.1
- CVE-2024-4282Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 depreca…9.8
- CVE-2024-4283An issue has been discovered in GitLab EE affecting all vers…6.1
Are you affected by CVE-2024-42812?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST