Stack Overflow Vulnerability in D-Link DIR-816 A2 Router
CVE-2022-43002

9.8CRITICAL

Key Information:

Vendor
D-Link
Status
Dir-816 Firmware
Vendor
CVE Published:
26 October 2022

Summary

A stack overflow vulnerability has been identified in the D-Link DIR-816 A2 Router. The flaw lies in the handling of the wizardstep54_pskpwd parameter within the /goform/form2WizardStep54 endpoint. This vulnerability can be exploited by sending specially crafted requests, potentially allowing remote attackers to execute arbitrary code, leading to unauthorized access or control of the device.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-81...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.