A critical stack-based buffer overflow vulnerability in D-Link DWR-M960 firmware version 1.01.07 poses a severe risk of system compromise or device instability.

The vulnerability exists in the /boafrm/formDosCfg endpoint due to unsafe usage of the strcpy function within the sub_46385C function. An attacker with low-level privileges can supply an oversized submit-url parameter during a save operation to trigger memory corruption.

Successful exploitation of this vulnerability can lead to a complete denial of service, rendering the device unreachable and disrupting network connectivity for all dependent users. Furthermore, because the web server typically runs with root privileges, the memory corruption can be leveraged to achieve arbitrary code execution, granting an attacker full control over the router and potential access to the internal network. Given the CVSS score of 8.8, this flaw represents a high-severity threat to infrastructure integrity.

Immediate Action: Since no official patch is currently available, administrators should immediately restrict access to the web management interface, ensuring it is not exposed to the public internet.

Proactive Monitoring: Monitor device logs and network traffic for unusual POST requests directed at /boafrm/formDosCfg that contain excessively long parameters.

Compensating Controls: Implement access control lists (ACLs) to limit management access to known, trusted internal IP addresses only.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical write-up by LX-66-LX on GitHub.

Given the availability of a public proof-of-concept and the high potential for arbitrary code execution, this vulnerability poses a significant risk to organizational security. Administrators must prioritize isolating the affected management interfaces from external access immediately. Continue to monitor official D-Link support channels for firmware updates that address this stack-based buffer overflow and apply them as soon as they become available.