A critical stack-based buffer overflow vulnerability in D-Link DWR-M960 routers allows remote attackers to compromise device stability or execute arbitrary code.

The vulnerability exists within the function sub_469104 of the /boafrm/formIpv6Setup endpoint, where the application uses an unsafe strcpy operation to process the submit-url parameter. This flaw allows an authenticated user to trigger a stack-based buffer overflow by providing an oversized input string, potentially leading to memory corruption.

Successful exploitation of this vulnerability poses a severe risk to network infrastructure. By crashing the device, an attacker can cause significant denial of service for all users relying on the router for connectivity. Furthermore, the potential for arbitrary code execution with root-level privileges could allow an attacker to gain full control over the network gateway, leading to complete data interception and unauthorized access to internal resources. With a CVSS score of 8.8, this vulnerability is categorized as High, reflecting the significant potential for impact on operational continuity.

Immediate Action: Since no official vendor patch is currently confirmed, administrators should restrict access to the device management interface to trusted internal networks only. Monitor official D-Link support channels for firmware updates and apply them immediately upon release.

Proactive Monitoring: Review device access logs for suspicious POST requests directed at the /boafrm/formIpv6Setup endpoint, particularly those containing unusually long string parameters.

Compensating Controls: If the management interface must remain accessible, implement strict IP-based access control lists (ACLs) to limit interaction with the router configuration panel to authorized administrative workstations.

Public Exploit Available: Yes, a functional proof-of-concept has been published in a security research repository (referenced via the CVE record).

Given the availability of a public proof-of-concept and the potential for full system compromise, this vulnerability requires urgent attention. Organizations utilizing the D-Link DWR-M960 should move to isolate the administration interface from the public internet immediately. Prioritize the application of any forthcoming firmware updates provided by D-Link to permanently remediate the underlying memory corruption flaw.