A critical stack-based buffer overflow vulnerability in D-Link DWR-M960 routers allows remote attackers to crash the device or execute arbitrary code.

The vulnerability exists in the function sub_457C5C within the /boafrm/formWsc endpoint, where an unsafe strcpy operation handles the submit-url parameter without bounds checking. While the CVSS vector indicates low privileges are required, the flaw allows an authenticated attacker to trigger memory corruption.

Successful exploitation of this vulnerability poses a severe risk to network availability and integrity. By triggering a buffer overflow, an attacker can crash the web interface or the entire router, leading to significant service downtime. Furthermore, the potential for arbitrary code execution could allow an attacker to gain full control over the gateway, enabling lateral movement within the local network or interception of sensitive traffic.

Immediate Action: Contact D-Link support or monitor the official D-Link security portal for a firmware update that addresses this overflow in the /boafrm/formWsc endpoint.

Proactive Monitoring: Review web server logs for suspicious POST requests to /boafrm/formWsc containing unusually long strings in the submit-url parameter.

Compensating Controls: Restrict access to the router administrative interface to trusted management IP addresses and disable remote management features if they are not strictly necessary.

Public Exploit Available: Yes, a published proof-of-concept exists in the technical write-up provided by the researcher on GitHub.

Given the severity of this memory corruption flaw and the availability of a public proof-of-concept, users must prioritize securing their D-Link DWR-M960 devices. If a vendor patch is not yet available, administrators should immediately isolate the device management interface from the public internet to prevent remote exploitation.