CVE-2024-22852

The vulnerability occurs in the genacgi_main function, which does not properly validate the length of input data, leading to a stack-based buffer overflow. An attacker can send a specially crafted network payload that overwrites the stack area and manipulates the program's execution flow. As a result, it is possible to force the telnet service to run on the device, opening the door for further unauthorized access.

An attacker can activate the telnet service on the vulnerable device, leading to potential unauthorized access to the router's system shell. This results in a complete breach of the device's confidentiality, integrity, and availability.

Apply patches available from the manufacturer according to references (https://www.dlink.com/en/security-bulletin/). Until updates are applied, it is recommended to restrict access to the device's administrative interface only to trusted local networks and block access to the device from the Internet.

D-Link Go-RT-AC750, firmware version GORTAC750_A1_FW_v101b03