First published: Fri Dec 23 2022(Updated: )
D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
D-Link DIR-882 A1 Firmware | =1.30b06 | |
D-Link DIR-882 A1 | ||
D-Link DIR-882 A1 Firmware | =1.30b06 | |
D-Link DIR-882 A1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-46566 is classified as a high severity vulnerability due to the potential for a stack overflow that could lead to remote code execution.
To fix CVE-2022-46566, updating the D-Link DIR-882 A1 firmware to the latest version that addresses this vulnerability is recommended.
CVE-2022-46566 affects the D-Link DIR-882 and DIR-878 routers specifically running firmware version 1.30b06.
A stack overflow in CVE-2022-46566 occurs when the Password parameter in the SetQuickVPNSettings module exceeds the allocated memory limits, potentially leading to malicious exploitation.
Yes, CVE-2022-46566 can lead to a remote attack as it allows an attacker to execute arbitrary code on the affected devices.