CVE-2024-22852

Vulnerability

The D-Link Go-RT-AC750 router firmware version GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow vulnerability in the genacgi_main function. This bug can be triggered by a specially crafted payload, enabling arbitrary code execution or service manipulation. [1]

Exploitation

An attacker can exploit this vulnerability by sending a crafted payload to the vulnerable function. No authentication is required if the service is exposed; however, network access to the device is necessary. The payload triggers a buffer overflow, allowing the attacker to control execution flow.

Impact

Successful exploitation results in the attacker enabling telnet service on the device, which can lead to full remote control and further compromise of the device and network. The vulnerability has a high severity (CVSS score not provided) but could allow complete device takeover.

Mitigation

D-Link has not released a firmware patch as of the publication date (2024-02-06). Users are advised to check the D-Link security bulletin [1] for updates. The device may be end-of-life (EOL); consider replacing it if no patch is provided.