Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-44405

Summary

A stack-based buffer overflow vulnerability exists in the D-Link DAP-1325 routers, specifically within the handling of XML data sent to the HNAP1 SOAP endpoint. This flaw arises from inadequate validation of user-supplied data length before it is copied into a fixed-length buffer. Network-adjacent attackers can exploit this vulnerability to execute arbitrary code under the root context without requiring any authentication, posing significant risks to network integrity and user data security. Proper measures should be taken to mitigate this vulnerability as detailed in advisory ZDI-23-1503.

References