D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41220

Summary

The vulnerability identified in D-Link DIR-3040 routers arises from a stack-based buffer overflow within the prog.cgi binary. This component processes HNAP requests via the lighttpd webserver running on TCP ports 80 and 443. A failure to validate a user-supplied string properly before copying it to a fixed-size buffer allows network-adjacent attackers with valid authentication to execute arbitrary code in the context of the root user. Exploitation of this flaw poses a serious risk to affected installations, necessitating prompt attention from users and network administrators.

References