Stack Overflow Vulnerability in D-Link Routers
CVE-2022-46560

7.2HIGH

Key Information:

Vendor
D-Link
Status
Dir-882 A1 Firmware
Vendor
CVE Published:
23 December 2022

Summary

A stack overflow vulnerability has been identified in D-Link DIR-882 and DIR-878 routers, triggered by the Password parameter within the SetWan2Settings module. This issue could potentially allow unauthorized access or control of the router settings, leading to further exploitation if not addressed promptly. Users are advised to review their firmware versions and apply necessary updates to mitigate risks.

References

https://www.dlink.com/en/security-bulletin/
https://hackmd.io/%400dayResearch/rkXr4BQPi
https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.