Critical Vulnerability Information Vulnerability Overview Manufacturer: D-Link Affected Device: DIR-816A2 Affected Version: FWv1.10CNB05_R1B011D88210 Vulnerability Details Vulnerable Location: /goform/form2IPQoSPlcAdd Description: The content from the parameter is passed to variable , then formatted and written into stack variable without length checking, leading to a stack overflow. Vulnerable Code Snippet POC Retrieve tokenID Execute POC Effect Observe router crash Can develop exploit to gain shell access