D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-35755

Summary

A stack-based buffer overflow vulnerability exists in the DDP service of D-Link DAP-2622 routers. This flaw stems from inadequate validation of the length of user-supplied data before it is copied into a fixed-length stack-based buffer. Attackers with network access can exploit this vulnerability to execute arbitrary code in the context of the root user, potentially compromising the security and functionality of the affected devices.

References