D-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37321

Summary

A stack-based buffer overflow vulnerability exists in the DDP service of D-Link DAP-2622 routers. The flaw is due to inadequate validation of user-supplied data length before it is copied into a fixed-length stack-based buffer. This oversight permits network-adjacent attackers to execute arbitrary code with root privileges, bypassing authentication requirements. Successful exploitation can significantly compromise the security and functionality of the affected devices.

References