CVE-2023-41221 D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this...

CVE-2023-41221

The CVE-2023-41221 issue affects D-Link DIR-3040 routers, specifically the prog.cgi SetWLanRadioSecurity function. The flaw is a stack-based buffer overflow in the prog.cgi binary that processes HNAP requests for the lighttpd webserver (on TCP ports 80/443). This occurs due to insufficient valida...