← Vulnerability feed

Vulnerability record · CVE-2024-27683 · published 11 April 2024

CVE-2024-27683: Dlink go-rt-ac750 firmware stack-based buffer overflow vulnerability

Dlink · Go Rt Ac750 Firmware

D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.

9.8 CVSS 3.1 Critical EPSS 0.88% · top 42.6% CWE-121 · Stack-based buffer overflow
9.8CVSS 3.1 base score
0.88%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://drive.google.com/file/d/18RhbBnaD_kH16Y6C-7TpSSPUmYKKyU_k/view Permissions Required
https://gist.github.com/sunwithmoon/428c3871482a600382fec0a1994a518b Third Party Advisory
https://www.dlink.com/en/security-bulletin/ Product
https://drive.google.com/file/d/18RhbBnaD_kH16Y6C-7TpSSPUmYKKyU_k/view Permissions Required
https://gist.github.com/sunwithmoon/428c3871482a600382fec0a1994a518b Third Party Advisory
https://www.dlink.com/en/security-bulletin/ Product

Track CVE-2024-27683 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-37055D-Link Go-RT-AC750 router buffer overflow in cgibin hnap_mainD-Link Go-RT-AC750 firmware revisions A v101b03 and B v200b02 contain a classic buffer overflow reachable through the cgibin hnap_main handler. The f…KEVEPSS 56%analysed9.8CVE-2024-22852Dlink go-rt-ac750 firmware out-of-bounds write vulnerabilityD-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers …EPSS 1.1%9.8CVE-2024-22853Dlink go-rt-ac750 firmware hard-coded credentials vulnerabilityD-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root acces…EPSS 4.8%9.8CVE-2024-22916Dlink go-rt-ac750 firmware out-of-bounds write vulnerabilityIn D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.EPSS 0.99%9.8CVE-2023-48842Dlink go-rt-ac750 firmware command injection vulnerabilityD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.EPSS 3.7%9.8CVE-2023-34800Dlink go-rt-ac750 firmware os command injection vulnerabilityD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.EPSS 29%9.8CVE-2023-26822Dlink go-rt-ac750 firmware command injection vulnerabilityD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.EPSS 3.4%9.8CVE-2022-37056Dlink go-rt-ac750 firmware os command injection vulnerabilityD-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main,EPSS 10%

Source: NIST National Vulnerability Database (record CVE-2024-27683), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.