A critical buffer overflow vulnerability in multiple D-Link router models allows remote attackers to compromise system integrity.

The vulnerability exists within the processing of the host argument in the /boafrm/formTracerouteDiagnosticRun endpoint. By manipulating this argument, a remote attacker with low privileges can trigger a buffer overflow, leading to memory corruption.

The exploitation of this flaw can lead to a total compromise of the affected routing hardware, allowing for unauthorized code execution. Given the CVSS score of 8.8, this represents a high risk that could facilitate network-wide eavesdropping, traffic redirection, or the use of these devices as entry points for lateral movement within the corporate network.

Immediate Action: Monitor the vendor support portal for official firmware updates and apply them to all affected devices as soon as they become available.

Proactive Monitoring: Review system logs for unusual diagnostic activity or repeated failed attempts to access routing configuration endpoints.

Compensating Controls: Restrict access to the router management interface to trusted internal IP addresses and employ a WAF or firewall rule to block unauthorized access to the /boafrm/ directory.

Public Exploit Available: Yes, a public proof of concept is available via the referenced GitHub issue (https://github.com/LX-LX88/cve/issues/12).

Due to the availability of a public proof of concept and the high severity of potential memory corruption, organizations should treat this vulnerability with high priority. We recommend isolating these devices from external network exposure until a vendor-supplied patch is successfully deployed.