CVE-2023-37311

DVE-2023-37311 affects D-Link DAP-2622 routers. The DDP service allows a stack-based buffer overflow on user-supplied data, enabling remote code execution with root privileges and no authentication. Public documentation consistently cites this as a stack-based overflow in the DDP Set Device Info ...

CVE-2023-37311 D-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35756

CVE-2023-35756 affects the D-Link DAP-2622, where the vulnerability resides in the DDP service as a stack-based buffer overflow caused by improper validation of the length of user-supplied data. This allows a network-adjacent attacker (no authentication required) to execute arbitrary code with ro...

CVE-2023-35756 D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35756 D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35755 D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35755 D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35755

The CVE concerns D-Link DAP-2622 via a stack-based buffer overflow in the DDP Set Date Time service. The flaw stems from insufficient validation of user-supplied data length before copying to a fixed-size stack buffer, allowing an adjacent-network attacker to execute code with root privileges wit...

CVE-2023-35754 D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35754

CVE-2023-35754 affects D-Link DAP-2622 routers, via a stack-based buffer overflow in the DDP Set AG Profile NMS URL. The flaw arises from improper validation of user-supplied data length before copying to a fixed-length stack buffer, allowing network-adjacent attackers to execute code with root p...

CVE-2023-35753 D-Link DAP-2622 DDP Set AG Profile UUID Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set AG Profile UUID Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2023-35752

CVE-2023-35752 affects D-Link DAP-2622 via the DDP service, due to improper validation of user-supplied data leading to a stack-based buffer overflow and remote code execution with root privileges. Attack requires network adjacency and no authentication. Documented CVSS v3.1/3.0 score: 8.8 (HIGH)...

CVE-2023-35751 D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35751

Affected product: D-Link DAP-2622 (DDP service). Vulnerability: Stack-based buffer overflow caused by improper validation of the length of user-supplied data prior to copying it into a fixed-length stack buffer, leading to remote code execution in the context of root. Impact/conditions: Remote co...

CVE-2023-35751 D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35750 D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability

D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-35750 D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability

D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-35750

CVE-2023-35750 affects D-Link DAP-2622 routers. The flaw resides in the DDP service, enabling information disclosure via lack of authentication. An unauthenticated, network-adjacent attacker can access credentials stored by the device, with potential to further compromise. Public metrics indicate...

CVE-2023-35747

CVE-2023-35747 – D-Link DAP-2622 DDP vulnerability : The flaw is in the DDP service of the DAP-2622 routers, caused by improper validation of user-supplied data length before copying to a fixed-length stack-based buffer. This leads to a stack-based buffer overflow with the potential for Remote Co...

CVE-2023-35747 D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...