Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
RCE
Buffer Overflow
Memory Corruption
D-Link
Dir 816 A2 Firmware
+1
NVD
CVSS 3.0
9.8
EPSS
6.5%