D-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37312

Summary

The D-Link DAP-2622 router is susceptible to a stack-based buffer overflow vulnerability within the DDP service, enabling network-adjacent attackers to execute arbitrary code on compromised devices. This vulnerability arises from insufficient validation of the length of user-supplied data before it is copied into a fixed-length stack-based buffer. Since authentication is not required to exploit this flaw, attackers can leverage it to execute code with root privileges on affected installations.

References