D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41218

Summary

A stack-based buffer overflow vulnerability exists in the prog.cgi binary of D-Link DIR-3040 routers, which could allow network-adjacent attackers to execute arbitrary code. This issue stems from insufficient validation of user-supplied strings during HNAP (Home Network Administration Protocol) requests directed at the lighttpd web server operating on TCP ports 80 and 443. Exploiting this vulnerability requires authentication, meaning that an attacker must have valid credentials to access the router. Once compromised, the attacker could execute malicious commands with root privileges, potentially compromising the entire network associated with the affected router.

References