CVE-2024-42812

9.8 criticalEPSS 16%

Critical (9.8) in dlink dir-860l firmware. EPSS 16% chance of exploitation in the next 30 days.

In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2024-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-860l_firmware

References

https://gist.github.com/XiaoCurry/574ed9c2b0d12cd0b45399116d82121c
https://www.dlink.com/en/security-bulletin/

Check your stack JSON