This vulnerability affects the D-Link DI-7001 MINI device firmware up to version 19.09.19A1. It arises from improper handling of the 'Time' argument in the sprintf function located in /httpd_debug.asp, leading to a stack-based buffer overflow. The vulnerability can be exploited remotely without user interaction or privileges. The exploit code is publicly accessible, increasing the risk of exploitation. No official patch or remediation guidance has been provided by the vendor as of the published date.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. Given the high CVSS score and the availability of public exploits, the vulnerability poses a significant risk to affected devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, especially restricting access to the API endpoint /httpd_debug.asp. Monitoring for unusual activity related to this endpoint is advisable. Avoid exposing the device to untrusted networks.