D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41230

Summary

The D-Link DIR-3040 router is subject to a vulnerability that allows network-adjacent attackers to perform remote code execution. This flaw is traced to the prog.cgi binary responsible for processing HNAP (Home Network Administration Protocol) requests on the lighttpd webserver. It arises from improper validation of input strings, which can lead attackers to exploit a stack-based buffer overflow. As a result, they can execute arbitrary code with root privileges, leading to unauthorized control over affected devices without requiring authentication.

References