D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-32146

Summary

A stack-based buffer overflow vulnerability exists in the D-Link DAP-1360 routers, specifically within the /cgi-bin/webproc endpoint. This flaw occurs due to insufficient validation of user-supplied data in the errorpage and nextpage parameters. As a result, network-adjacent attackers can exploit this vulnerability to execute arbitrary code, running with root privileges, on affected devices without requiring any form of authentication. Security measures should be diligently implemented to safeguard devices against potential exploitation.

References