A critical stack-based buffer overflow vulnerability in the D-Link DWR-M960 router, identified in firmware version 1.01.07, poses a significant risk of remote code execution or device compromise.

The vulnerability exists in the function sub_468D64 within the /boafrm/formDhcpv6s endpoint, where an unsafe strcpy operation fails to validate the length of the submit-url parameter. This flaw allows a remote, authenticated attacker to trigger memory corruption, leading to a crash or arbitrary code execution with root-level privileges.

The exploitation of this vulnerability can lead to a complete denial of service of network infrastructure or unauthorized administrative access to the router. Given the CVSS score of 8.8, this represents a high-severity risk that could expose internal network traffic to interception, facilitate lateral movement, or result in long-term device hijacking.

Immediate Action: As no official patch is currently available, administrators should restrict access to the web management interface of the DWR-M960 to trusted internal IP addresses only. Disable external management features immediately to prevent remote exploitation attempts.

Proactive Monitoring: Monitor system logs for repeated crashes of the web server (boa) or unusual POST requests targeting the /boafrm/formDhcpv6s endpoint. Sudden, unexplained reboots of the device should be investigated as potential evidence of exploitation.

Compensating Controls: Deploy a Web Application Firewall (WAF) or an Intrusion Prevention System (IPS) configured to inspect and block HTTP POST requests containing excessively long submit-url parameters.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the researcher's write-up on GitHub.

Given the severity of this buffer overflow and the availability of a public proof-of-concept, users must prioritize securing their D-Link DWR-M960 devices. Immediately isolate these units from the public internet and continue to monitor vendor support channels for the release of a firmware update that addresses the unsafe memory handling.