D-Link DIR-505に脆弱性、攻撃コードが公開済み
Summary
D-LinkのルーターDIR-505の1.10B02に、ネットワーク越しに認証なしで突かれうる最高評価の脆弱性が公表されました。該当機器を洗い出し、ベンダーの告知で修正版の有無を確認してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
D-LinkのルーターDIR-505の1.10B02に、ネットワーク越しに認証なしで突かれうる最高評価の脆弱性が公表されました。該当機器を洗い出し、ベンダーの告知で修正版の有無を確認してください。
Original description The description as published by the source.
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- advisory CVE-2026-120189 | CVE Analysis and Report
- advisory Submit #1027185 | D-Link DIR-505 1.10B02 Stack-based Buffer Overflow
- exploit github.com
- web VDB-429528 | D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow
- web VDB-429528 | CTI Indicators (IOB, IOC, IOA)
- web dlink.com