Skip to content

ioprojecton/dir-3040_dos

Repository files navigation

dir-3040 Denial of Service

Dir-3060 might also be affected as they share many components from same firmware.

Tested on latest firmware 1.20b03a hotfix

ftp server user access page by default is configured for any user with write privileges to write directly to ram instead of restricting to usb drives only.

There are no out of bound or buffer overflow checks in place in latest firmware for this issue.

After writing(filling) available memory system will crash and reboot.

User doesnt need to have administrator privileges to perform the attack.

proof of concept in detail with pictures below

D-link was contacted and strongly denied presence of the issue because they couldnt reproduce the issue. All other nonsensical resolutions were denied by me.

Screenshot

Screenshot

Screenshot

Showing default config for new user

Screenshot

Check for available memory in syslog

Screenshot

Screenshot

Creating 300mb file with dd accessing ftp as a user with read and write privileges changing to / and writing the file

Screenshot

Screenshot

Screenshot

As soon as available free memory is filled system will crash and reboot.

This can be reproduced with any size usb flash.

There is no patch or solution yet.

About

CVE-2024-27619

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published