CVE-2008-1266: D-Link Di-524

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.

Affected products

• D-Link Di-524: any version

Published 2008-03-10. Last modified 2026-06-16.