CVE-2022-43001

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function

Critical · published October 26, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

🔥 A sneaky stack overflow in D-Link DIR-816 A2 could turn your Wi-Fi router into a digital party crashers’ paradise! Think of it like a guest at a party who just won’t stop piling on the food—eventually, the table collapses! In this case, the pskValue parameter can be overloaded, causing the system to crash and leave your network vulnerable. An attacker could exploit this vulnerability to crash the router, potentially disrupting your entire network. They could even execute arbitrary code, giving them the keys to your digital kingdom. Imagine your smart home turning against you—scary thought, right?

Put simply

Think of it like a guest at a party who just won’t stop piling on the food—eventually, the table collapses! In this case, the pskValue parameter can be overloaded, causing the system to crash and leave your network vulnerable. This stack overflow vulnerability exists in the setSecurity function of the D-Link DIR-816 A2’s firmware, where an overly long input in the pskValue parameter can lead to unexpected behavior and possible code execution.

What to do

An attacker could exploit this vulnerability to crash the router, potentially disrupting your entire network. They could even execute arbitrary code, giving them the keys to your digital kingdom. Imagine your smart home turning against you—scary thought, right? To protect your network, update your D-Link DIR-816 A2 firmware to version 1.10 B06 or later immediately. Consider changing your default security settings as an extra precaution to harden your defenses. Don’t forget to regularly check for updates! You've got this! Stay proactive, and your network will be safer in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01274 · 69.7th percentile
Published
2022-10-26T00:00Z
EPSS history
Timeline
  • 26 OCT 00:00Z
    D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function
    cvelistv5