Arbitrary Code Execution Vulnerability in D-Link DIR-825 Router

CVE-2022-43642

Summary

This vulnerability in D-Link DIR-825 routers enables network-adjacent attackers to execute arbitrary code without authentication. The flaw is located within the YouTube plugin of the xupnpd service, which operates on TCP port 4044. Specifically, it arises from insufficient validation of user-supplied strings prior to executing system calls. By exploiting this flaw, an attacker can run code within the context of the admin user, potentially leading to a complete compromise of the router.

References