Stack-based Buffer Overflow Remote Code Execution Vulnerability in D-Link DAP-2622 Routers

CVE-2023-35757

Summary

The D-Link DAP-2622 router is susceptible to a stack-based buffer overflow vulnerability that enables network-adjacent attackers to execute arbitrary code on impacted installations. This vulnerability arises from insufficient validation of user-supplied data length before copying it into a fixed-length stack buffer within the DDP service. Exploitation of this flaw does not require authentication, allowing attackers to compromise the device without any prior access.

References