CVE-2023-43196

D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function

published September 20, 2023

CVSS
—
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

⚠️ A stack overflow in the D-Link DI-7200GV2.E1 could let attackers disrupt services with just a crafty request! This is like an overflowing suitcase — too much packed in can cause a big mess, spilling everything out and creating chaos! If exploited, this vulnerability could lead to service disruption, making your network less reliable. Although there's no known attack vector yet, leaving it unchecked could open the door for future exploits or instability.

Put simply

This is like an overflowing suitcase — too much packed in can cause a big mess, spilling everything out and creating chaos! The vulnerability arises from a stack overflow via the zn_jb parameter in the arp_sys.asp function, which can cause the device to crash when fed excessive data, leading to potential denial of service.

What to do

If exploited, this vulnerability could lead to service disruption, making your network less reliable. Although there's no known attack vector yet, leaving it unchecked could open the door for future exploits or instability. To protect your D-Link DI-7200GV2.E1 from this stack overflow vulnerability, ensure you're running the latest firmware version. If you haven’t done so, check D-Link's website or support for updates and apply them as soon as possible. Regularly audit your devices for patches and updates to maintain security! You've got this! Keep your network secure, and you'll be a hero against potential vulnerabilities! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00916 · 59.8th percentile
Published
2023-09-20T00:00Z
EPSS history
Timeline
  • 20 SEP 00:00Z
    D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function
    cvelistv5