Stack-based Buffer Overflow Remote Code Execution Vulnerability in D-Link DAP-2622 Routers
CVE-2023-35757
8.8HIGH
What is CVE-2023-35757?
The D-Link DAP-2622 router is susceptible to a stack-based buffer overflow vulnerability that enables network-adjacent attackers to execute arbitrary code on impacted installations. This vulnerability arises from insufficient validation of user-supplied data length before copying it into a fixed-length stack buffer within the DDP service. Exploitation of this flaw does not require authentication, allowing attackers to compromise the device without any prior access.
Affected Version(s)
DAP-2622 1.00 dated 16-12-2020