以下是从网页截图中获取到的关于漏洞的关键信息,以简洁的Markdown格式呈现: NAME OF AFFECTED PRODUCT(S) D-link Router DWR-M960 B1 V1.01.07 - Buffer Overflow in /boafm/formLteSetup Vulnerability Details Vulnerability Description During a security review of the D-Link DWR-M960 (Hardware B1, Firmware V1.01.07), a buffer overflow vulnerability was discovered in the LTE configuration endpoint . The vulnerability is located within the function, which handles LTE interface settings. The root cause is the unsafe usage of the function in the function, which copies user-controllable strings into fixed-size buffers without length validation. Vulnerability location: (Function: ) Impact Denial of Service (DoS): Overwriting critical global variables or data segments, causing the web server (boa) to crash or the device to reboot unexpectedly. Arbitrary Code Execution: An attacker could potentially hijack the execution flow and execute arbitrary code with the privileges of the web server (usually root). Proof of Concept (PoC) Screenshots of the local reproduction Setting up the environment using firmadyne Running the PoC (via Burp Repeater) Result: Web server crashes, and the device is unreachable.