CVE-2021-43722: Buffer Overflow
Published Mar 31, 2022
·Updated
D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.
Affected Software
2 affected components
Dlink Dir-645 Firmware=1.03
Dlink Dir-645=a1
Event History
Mar 31, 2022
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this D-Link DIR-645 issue?
The vulnerability ID of this D-Link DIR-645 issue is CVE-2021-43722.
2
What is the severity of CVE-2021-43722?
The severity of CVE-2021-43722 is critical with a CVSS score of 9.8.
3
What is the affected software version of CVE-2021-43722?
The affected software version of CVE-2021-43722 is D-Link DIR-645 Firmware 1.03 A1.
4
How does the vulnerability in D-Link DIR-645 occur?
The vulnerability in D-Link DIR-645 occurs due to a buffer overflow in the hnap_main function.
5
Are there any known fixes or patches for CVE-2021-43722?
Yes, it is recommended to update to a fixed version of the firmware provided by D-Link to mitigate the vulnerability.