Global infos:

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src.

CVE Status: Awaiting Analysis

References:

[email protected]

[email protected]

Metrics:

Attribute	Value
Attack Complexity	LOW
Attack Vector	ADJACENT_NETWORK
Availability Impact	NONE
Base Score	5.7
Base Severity	MEDIUM
Confidentiality Impact	NONE
Integrity Impact	HIGH
Privileges Required	LOW
Scope	UNCHANGED
User Interaction	NONE
Vector String	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability Score	2.1
Impact Score	3.6
Source	134c704f-9b21-4f2e-91b3-4a467353bcc0
Type	Secondary

Links:

Exploit-db
Github