CVE-2022-43625

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43625

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43625

CVE-2022-43625 affects D-Link DIR-1935 (firmware 1.03). The vulnerability lies in the NetMask handling inside the web management portal when processing SetStaticRouteIPv4Settings requests; the value is copied into a fixed-length stack buffer without proper length validation, enabling a stack-base...