D-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37318

What is CVE-2023-37318?

A vulnerability within the DDP service of D-Link DAP-2622 routers permits network-adjacent attackers to execute arbitrary code on compromised devices. This flaw arises due to inadequate validation of the length of user-supplied input before it is copied into a fixed-length stack-based buffer. Exploitation of this vulnerability requires no authentication, enabling attackers to gain root-level access and potentially control the affected devices. Users are advised to apply available updates from D-Link to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References