A critical stack-based buffer overflow vulnerability in D-Link DIR-878 routers poses a severe risk of remote code execution and full system compromise.

The vulnerability exists in the SetWan3Settings function, where improper handling of the Primary or Secondary arguments leads to a stack-based buffer overflow. This flaw requires low privileges to trigger, allowing an attacker to overwrite memory and potentially execute arbitrary code on the device.

The vulnerability carries a CVSS score of 9.9, reflecting its critical potential for total system compromise. Successful exploitation could allow unauthorized actors to gain full control over the networking hardware, facilitating lateral movement within the internal network, data interception, or the permanent disruption of business-critical connectivity.

Immediate Action: Given the lack of a confirmed vendor patch, administrators should restrict administrative access to the device to trusted management interfaces only and disable remote management features where possible.

Proactive Monitoring: Monitor network traffic for anomalous patterns directed at the router management interface and review system logs for signs of repeated crashes or unexpected service restarts.

Compensating Controls: Deploy a hardware or software firewall to block unauthorized access to the router management ports from untrusted networks, effectively isolating the vulnerable function from external reach.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the technical research provided by the vulnerability discovery report.

The severity of this vulnerability necessitates immediate attention, as it provides a direct vector for persistent device compromise. Because no patch is currently confirmed, organizations must prioritize network-level isolation of all affected D-Link DIR-878 devices to prevent remote exploitation until a vendor-supplied firmware update becomes available.