Stack-based Buffer Overflow Remote Code Execution Vulnerability Affects D-Link DAP-1325 Routers

CVE-2023-44409

Summary

A vulnerability exists in D-Link DAP-1325 routers that allows network-adjacent attackers to execute arbitrary code by exploiting the improper validation of user-supplied XML data within the HNAP1 SOAP endpoint. This flaw arises from inadequate checks on the length of input data before copying it into a restricted stack-based buffer. Consequently, this leads to a stack-based buffer overflow, enabling unauthorized code execution in the context of the root user. Attackers can exploit this vulnerability without the need for authentication, potentially compromising the security of affected routers.

References