D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37315

What is CVE-2023-37315?

A stack-based buffer overflow vulnerability exists within the DDP service of the D-Link DAP-2622 router. This flaw arises from improper validation of the length of user-supplied data before it is copied into a fixed-length buffer. As a consequence, network-adjacent attackers can exploit this weakness to execute arbitrary code with root privileges on impacted systems. The vulnerability can be exploited without any authentication, elevating the risk for enterprises relying on these routers for their network infrastructure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References