CVE-2021-33268

D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

4.07% chance of exploitation in the next 30 days, 91st percentile

Published

2021-12-01

Updated

2024-08-03

Proof-of-concept exploits (1)

• Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln033★ · 2024-08-02

Security advisories

• https://www.dlink.com/en/security-bulletin

References

• CVE Record
• NVD entry

Related

• CVE-2021-33265
• CVE-2021-33266
• CVE-2021-33267
• CVE-2021-33269
• CVE-2021-33270
• CVE-2021-33271