Stack-based Buffer Overflow Remote Code Execution Vulnerability in D-Link DAP-2622 Routers

CVE-2023-35749

What is CVE-2023-35749?

A vulnerability exists in the D-Link DAP-2622 routers due to improper validation of user-supplied data when handled by the DDP service. This flaw enables network-adjacent attackers to exploit the buffer overflow and execute arbitrary code with root privileges on the device. The lack of authentication requirements for exploitation increases the risk of this vulnerability, making affected installations particularly vulnerable to malicious attacks. It is crucial for users and administrators to address this issue promptly to prevent potential exploitation and unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References