D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability
CVE-2023-41229

8.8HIGH

Key Information:

Vendor
D-link
Status
Dir-3040
Vendor
CVE Published:
3 May 2024

Summary

A vulnerability in D-Link DIR-3040 routers exposes the device to potential remote code execution by network-adjacent attackers. This issue arises from inadequate validation of user-supplied input within the prog.cgi binary, associated with the lighttpd webserver operating on TCP ports 80 and 443. By exploiting this flaw, an attacker is able to execute arbitrary code with root privileges on the affected system, creating significant security risks for users and their networks.

Affected Version(s)

DIR-3040 120B03

References

https://www.zerodayinitiative.com/advisories/ZDI-23-1337/
x_research-advisory
https://supportannouncement.us.dlink.com/announcement/pub...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.