This vulnerability affects the D-Link DI-7001 MINI router firmware up to version 19.09.19A1. It arises from improper handling of the Time argument in the sprintf function located in /httpd_debug.asp, causing a stack-based buffer overflow. The vulnerability can be triggered remotely without user interaction or privileges, allowing an attacker to execute arbitrary code or cause a denial of service. The CVSS 4.0 base score is 8.7, reflecting high impact and exploitability. No vendor advisory or patch information is currently available, and the exploit is publicly known.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the high CVSS score and the availability of public exploit code, affected devices are at significant risk if exposed to untrusted networks. There is no indication that the vulnerability requires user interaction or elevated privileges, increasing the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to restrict remote access to the device's management interface, especially blocking access to the /httpd_debug.asp endpoint if possible. Network-level controls such as firewall rules should be applied to limit exposure. Monitor vendor channels for updates and apply patches promptly once available.