CVE-2023-43238

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi

High · published September 21, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow in the D-Link DIR-816 could let attackers execute arbitrary code through a single malformed request! Think of this vulnerability like a fast-food drive-thru where a customer shouts an overly complicated order. If the staff can't handle it, the whole system crashes, just like how this stack overflow can cause your router to go haywire! An attacker could exploit this vulnerability to gain control over the device, leading to a catastrophic breach of your home network. Imagine your internet gateway handing over the keys to your entire digital kingdom — personal data, passwords, and more could be at risk!

Put simply

Think of this vulnerability like a fast-food drive-thru where a customer shouts an overly complicated order. If the staff can't handle it, the whole system crashes, just like how this stack overflow can cause your router to go haywire! This stack overflow occurs via the 'nvmacaddr' parameter in 'form2Dhcpip.cgi', allowing attackers to send specially crafted requests to the router, potentially executing arbitrary code.

What to do

An attacker could exploit this vulnerability to gain control over the device, leading to a catastrophic breach of your home network. Imagine your internet gateway handing over the keys to your entire digital kingdom — personal data, passwords, and more could be at risk! Update the D-Link DIR-816 to version 1.10CNB06 immediately to patch this vulnerability. Additionally, review your network security settings and monitor for any unusual activity. It’s also a good idea to change passwords for any network-connected devices. You've got this! Follow these steps to secure your router and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01283 · 69.9th percentile
Published
2023-09-21T00:00Z
EPSS history
Timeline
  • 21 SEP 00:00Z
    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi
    cvelistv5