Executive Summary

This vulnerability is a stack buffer overflow in the D-Link DIR-878A1 router firmware, specifically in the USB storage handling module of the rc binary. It happens because the "Serial Number" field from a USB device is read into a 64-byte stack buffer using sscanf, but fgets reads up to 127 bytes, which can overflow the buffer. An attacker with physical access or control over a USB device can exploit this to potentially execute arbitrary code on the device.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can allow an attacker with physical access or control over a USB device to execute arbitrary code on the affected router. This could lead to unauthorized control over the device, potentially compromising network security and functionality.

Useful 0 Not Useful 0