D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37315

Summary

A stack-based buffer overflow vulnerability exists within the DDP service of the D-Link DAP-2622 router. This flaw arises from improper validation of the length of user-supplied data before it is copied into a fixed-length buffer. As a consequence, network-adjacent attackers can exploit this weakness to execute arbitrary code with root privileges on impacted systems. The vulnerability can be exploited without any authentication, elevating the risk for enterprises relying on these routers for their network infrastructure.

References