CVE-2024-45695: The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote…

PriorityP267critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.58%

73.0th percentile

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
d-link	dir-x4860_a1	—	—
d-link	dir-x4860_a1	—	—
dlink	dir-x4860_firmware	—	—
dlink	dir-x4860_firmware	—	—

Detection & IOCsextracted from sources · hover to see the quote

→CVE-2024-45695 is a stack-based buffer overflow in the web service of affected D-Link routers; detection should focus on anomalous or oversized HTTP requests to the router's web service interface from unauthenticated sources ↗
→No authentication is required to trigger the vulnerability; monitor for unexpected or malformed web service requests to D-Link COVR-X1870, DIR-X4860, and DIR-X5460 devices from external/WAN-side sources ↗
→D-Link routers are commonly targeted by malware botnets; prioritize detection and patching of these devices, especially those exposed to the internet ↗

·Affected models are COVR-X1870, DIR-X4860, and DIR-X5460; fixed firmware versions are v1.03B01 for COVR-X1870, v1.04B05 for DIR-X4860, and DIR-X5460A1_V1.11B04 for DIR-X5460 — devices running older firmware remain vulnerable ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.