CVE-2024-33774

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

1.03% chance of exploitation in the next 30 days, 61th percentile

Published

2024-05-10

Updated

2025-02-13

Proof-of-concept exploits (1)

• YuboZhaoo/IoT/blob/main/D-Link/DIR-619L/20240424.md

References

• CVE Record
• NVD entry

Related

• CVE-2024-33771
• CVE-2024-33772
• CVE-2024-33773
• CVE-2024-33775
• CVE-2024-3378
• CVE-2024-33789