Lucene search
PRIOn knowledge basePRION:CVE-2022-43648HistoryMar 29, 2023 - 7:15 p.m.
Heap overflow
2023-03-2919:15:00
PRIOn knowledge base
www.prio-n.com
1
network adjacent attackers
arbitrary code execution
d-link dir-3040
minidlna service
validation flaw
heap-based buffer
zdi-can-19910
nvd
0.001 Low
EPSS
Percentile
35.2%
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MiniDLNA service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the MiniDLNA service. Was ZDI-CAN-19910.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dir-3040_firmware | eq | <= 1.20b3 |
Related
zdi
zdi
cve
cve
CVE-2022-43648
2023-03-29 19:15:21
cnvd
cnvd
D-Link DIR-3040 Buffer Overflow Vulnerability
2023-03-31 00:00:00
cvelist
cvelist
CVE-2022-43648
2023-03-29 00:00:00
nvd
nvd
CVE-2022-43648
2023-03-29 19:15:21