CVE-2022-46475

D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function

Critical · published January 17, 2023

CVSS v3.1
9.8
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

🔥 A sneaky stack overflow hides in the D-Link DIR 645A1's `genacgi_main` function, waiting to be exploited! Think of it like a crowded elevator that’s just about to break under the weight — if one more person steps in, chaos ensues. This vulnerability lets attackers overload the system's stack just enough to cause a catastrophic failure. An attacker exploiting this vulnerability could potentially crash the device, leading to denial of service and leaving your network open to further attacks. Imagine your home network going dark, leaving your devices vulnerable and unprotected!

Put simply

Think of it like a crowded elevator that’s just about to break under the weight — if one more person steps in, chaos ensues. This vulnerability lets attackers overload the system's stack just enough to cause a catastrophic failure. The stack overflow occurs via the `service` variable in the `genacgi_main` function, enabling attackers to send specially crafted input that exceeds the stack's buffer, leading to unpredictable behavior.

What to do

An attacker exploiting this vulnerability could potentially crash the device, leading to denial of service and leaving your network open to further attacks. Imagine your home network going dark, leaving your devices vulnerable and unprotected! Immediately patch your D-Link DIR 645A1 to the latest firmware version to close this critical vulnerability. Regularly check for updates and ensure your network devices are running the most secure software available. You've got this! With these steps, you'll keep your network safe and secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09529 · 95.5th percentile
Published
2023-01-17T00:00Z
EPSS history
Timeline
  • 17 JAN 00:00Z
    D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function
    cvelistv5