D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41230

What is CVE-2023-41230?

The D-Link DIR-3040 router is subject to a vulnerability that allows network-adjacent attackers to perform remote code execution. This flaw is traced to the prog.cgi binary responsible for processing HNAP (Home Network Administration Protocol) requests on the lighttpd webserver. It arises from improper validation of input strings, which can lead attackers to exploit a stack-based buffer overflow. As a result, they can execute arbitrary code with root privileges, leading to unauthorized control over affected devices without requiring authentication.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References