Arbitrary Code Execution Vulnerability in D-Link DIR-825 Routers

CVE-2022-43644

Summary

A security flaw exists in D-Link DIR-825 routers that allows network-adjacent attackers to execute arbitrary code without the need for authentication. This issue arises from the Dreambox plugin for the xupnpd service, which listens on TCP port 4044. The vulnerability stems from inadequate validation of a user-supplied string prior to its use in a system call. An attacker exploiting this vulnerability can execute code with the privileges of the admin user, potentially compromising the device and network.

References