D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability
CVE-2023-41229
8.8HIGH
What is CVE-2023-41229?
A vulnerability in D-Link DIR-3040 routers exposes the device to potential remote code execution by network-adjacent attackers. This issue arises from inadequate validation of user-supplied input within the prog.cgi binary, associated with the lighttpd webserver operating on TCP ports 80 and 443. By exploiting this flaw, an attacker is able to execute arbitrary code with root privileges on the affected system, creating significant security risks for users and their networks.
Affected Version(s)
DIR-3040 120B03