Stack-based Buffer Overflow Remote Code Execution Vulnerability in D-Link DAP-2622 Routers

CVE-2023-35749

Summary

A vulnerability exists in the D-Link DAP-2622 routers due to improper validation of user-supplied data when handled by the DDP service. This flaw enables network-adjacent attackers to exploit the buffer overflow and execute arbitrary code with root privileges on the device. The lack of authentication requirements for exploitation increases the risk of this vulnerability, making affected installations particularly vulnerable to malicious attacks. It is crucial for users and administrators to address this issue promptly to prevent potential exploitation and unauthorized access.

References