Description
A vulnerability was detected in D-Link DIR-600L 2.17/2.17b02. Affected by this vulnerability is the function authenticationcgi_main of the file authentication.cgi. Performing a manipulation of the argument id/password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | DIR-600L | 2.17, 2.17b02 | — |
References
- VDB-437416 | D-Link DIR-600L authentication.cgi authenticationcgi_main stack-based overflow vdb-entry technical-description
- VDB-437416 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-129353 | CVE Analysis and Report third-party-advisory
- Submit #1043523 | D-Link DIR-600L 2.17b02 Stack-based Buffer Overflow third-party-advisory
- https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/D-Link-DIR-600L-authentication-cgi.md exploit
- https://www.dlink.com/ product