D-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37314

Summary

The D-Link DAP-2622 routers are exposed to a stack-based buffer overflow vulnerability within the DDP service. This flaw occurs due to improper validation of incoming user-supplied data length, allowing network-adjacent attackers to execute arbitrary code on the affected devices. Notably, authentication is not required to exploit this vulnerability, enabling potential exploitation in unsecured environments. Successful exploitation grants attackers the ability to execute code in the context of the root user, posing significant risks to the integrity and confidentiality of network traffic.

References