Test ID:	1.3.6.1.4.1.25623.1.0.170589
Category:	General
Title:	D-Link DIR-619L <= 2.02 Multiple Buffer Overflow Vulnerabilities (Sep 2023)
Summary:	D-Link DIR-619L devices are prone to multiple buffer overflow; vulnerabilities.
Description:	Summary: D-Link DIR-619L devices are prone to multiple buffer overflow vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2023-43860: Buffer overflow via formSetWanNonLogin function - CVE-2023-43861: Buffer overflow via formSetWanPPPoE function - CVE-2023-43862: Buffer overflow via formLanguageChange function - CVE-2023-43863: Buffer overflow via formSetWanDhcpplus function - CVE-2023-43864: Buffer overflow via formSetWAN_Wizard55 function - CVE-2023-43865: Buffer overflow via formSetWanPPTP function - CVE-2023-43866: Buffer overflow via formSetWAN_Wizard7 function - CVE-2023-43867: Buffer overflow via formSetWanL2TP function - CVE-2023-43868: Buffer overflow via websGetVar function - CVE-2023-43868: Buffer overflow via formSetWAN_Wizard56 function Affected Software/OS: D-Link DIR-619L devices through firmware version 2.02. Solution: No solution was made available by the vendor. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. Note: Vendor states that the model reached its End-of-Support Date, is no longer supported, and firmware development has ceased. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-43860 https://github.com/YTrick/vuln/blob/main/DIR-619L%20Buffer%20Overflow_1.md https://www.dlink.com/en/security-bulletin/ Common Vulnerability Exposure (CVE) ID: CVE-2023-43861 Common Vulnerability Exposure (CVE) ID: CVE-2023-43862 Common Vulnerability Exposure (CVE) ID: CVE-2023-43863 Common Vulnerability Exposure (CVE) ID: CVE-2023-43864 Common Vulnerability Exposure (CVE) ID: CVE-2023-43865 Common Vulnerability Exposure (CVE) ID: CVE-2023-43866 Common Vulnerability Exposure (CVE) ID: CVE-2023-43867 Common Vulnerability Exposure (CVE) ID: CVE-2023-43868 Common Vulnerability Exposure (CVE) ID: CVE-2023-43869
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.