Remote Code Execution Vulnerability in D-Link DIR-X3260 Routers

CVE-2023-51613

Summary

The D-Link DIR-X3260 router is susceptible to a stack-based buffer overflow vulnerability in the prog.cgi binary, which manages HNAP requests for the lighttpd web server operated on TCP ports 80 and 443. This flaw arises due to improper validation of user-supplied input, which allows an attacker to overwrite the stack memory of the application. Successful exploitation requires authentication and grants the attacker the ability to execute arbitrary code with root privileges on the affected device. This vulnerability highlights the importance of secure coding practices and proper input validation methods in network device firmware.

References