A critical buffer overflow vulnerability in multiple D-Link router models allows remote attackers to execute arbitrary code or cause system instability.

This flaw involves a buffer overflow triggered by improper input validation within the /boafrm/formPingDiagnosticRun file. While the CVSS vector indicates low privileges are required, the vulnerability is reachable remotely and poses a significant risk to device integrity.

Successful exploitation of this vulnerability could lead to a complete compromise of the affected routing hardware. Given the CVSS score of 8.8, the potential for unauthorized code execution poses severe risks to network confidentiality and availability, potentially allowing attackers to pivot into internal segments or intercept sensitive traffic.

Immediate Action: Since a specific patch is not yet confirmed, administrators should restrict access to the web management interface, disable the diagnostic ping feature if possible, or isolate these devices from public-facing networks.

Proactive Monitoring: Monitor network traffic for unusual diagnostic requests or malformed payloads targeting the /boafrm/formPingDiagnosticRun endpoint.

Compensating Controls: Deploy a Web Application Firewall or an Intrusion Prevention System with rules configured to inspect and block suspicious input strings directed at router management endpoints.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the provided GitHub repository reference.

Due to the remote nature of this vulnerability and the confirmed existence of a public proof-of-concept, users must treat this as a high-priority risk. Administrators should immediately audit their network perimeter to identify affected D-Link hardware and apply the strictest possible access controls until an official firmware update from the vendor is verified and deployed.