CVE-2023-45574: Buffer Overflow
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the fn parameter of the file.data function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45574?
The severity of CVE-2023-45574 is critical (9.8).
Which D-Link devices are affected by CVE-2023-45574?
The D-Link devices DI-7003GV2.D1, DI-7100G+V2.D1, DI-7100GV2.D1, DI-7200G+V2.D1, DI-7200GV2.E1, DI-7300G+V2.D1, and DI-7400G+V2.D1 are affected by CVE-2023-45574.
How can a buffer overflow vulnerability be exploited?
A buffer overflow vulnerability can be exploited by overflowing a buffer to overwrite adjacent memory and execute arbitrary code.
Are there any known fixes or patches for CVE-2023-45574?
Yes, D-Link has released firmware updates to address the buffer overflow vulnerability. Users should update their affected devices to the latest firmware version provided by the manufacturer.
Where can I find more information about CVE-2023-45574?
More information about CVE-2023-45574 can be found on the GitHub repository and the D-Link security bulletin linked in the references.