D-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37314

What is CVE-2023-37314?

The D-Link DAP-2622 routers are exposed to a stack-based buffer overflow vulnerability within the DDP service. This flaw occurs due to improper validation of incoming user-supplied data length, allowing network-adjacent attackers to execute arbitrary code on the affected devices. Notably, authentication is not required to exploit this vulnerability, enabling potential exploitation in unsecured environments. Successful exploitation grants attackers the ability to execute code in the context of the root user, posing significant risks to the integrity and confidentiality of network traffic.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References