CVE-2021-34861

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by defaul...

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by defaul...

CVE-2021-34861

This CVE affects D-Link DAP-2020 routers, specifically version 1.01rc001, where the webproc endpoint handling on TCP port 80 does improper length validation of user data, causing a stack-based overflow that can allow root-level code execution by network-adjacent attackers with no authentication. ...