Buffer Overflow Vulnerability in D-Link Router Models

CVE-2019-6258

Summary

The D-Link DIR-822 Rev.Bx devices, utilizing firmware versions 202KRb06 and earlier, exhibit a vulnerability that allows for a buffer overflow. This flaw arises from the improper handling of the MacAddress data in HNAP protocol messages sent to the /HNAP1/SetClientInfo endpoint. As a result, an attacker can exploit this weakness through crafted messages, potentially leading to unauthorized access or other malicious activities.

References