D-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2023-37321
8.8HIGH
What is CVE-2023-37321?
A stack-based buffer overflow vulnerability exists in the DDP service of D-Link DAP-2622 routers. The flaw is due to inadequate validation of user-supplied data length before it is copied into a fixed-length stack-based buffer. This oversight permits network-adjacent attackers to execute arbitrary code with root privileges, bypassing authentication requirements. Successful exploitation can significantly compromise the security and functionality of the affected devices.
Affected Version(s)
DAP-2622 1.00 dated 16-12-2020