Buffer Overflow Vulnerability in D-Link DCS-932L Product Line
CVE-2025-4843
8.7HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-4843?
A vulnerability affecting the D-Link DCS-932L product line has been identified, where manipulation of the CameraName argument in the SubUPnPCSInit function can lead to a stack-based buffer overflow. This issue is particularly concerning as it allows remote attackers to exploit the vulnerability in unsupported products. The exploit has been publicly disclosed, heightening the risk to users of these devices. Continuous use of unsupported products may leave systems open to unauthorized access and manipulation.
Affected Version(s)
DCS-932L 2.18.01
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.