CVE-2023-37312

D-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-37312

The CVE-2023-37312 entry concerns the D-Link DAP-2622 DDP Set Device Info Device Name vulnerability. The root cause is a stack-based buffer overflow in the DDP service due to improper validation of the length of user-supplied data before copying to a fixed-size stack buffer. This allows network-a...