CVE-2023-45578: Buffer Overflow
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the papen/chapen parameter of the pppoebase.asp function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45578?
The severity of CVE-2023-45578 is critical with a CVSS score of 9.8.
Which D-Link devices are affected by CVE-2023-45578?
D-Link devices DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 are affected by CVE-2023-45578.
How can I fix the buffer overflow vulnerability in D-Link devices with CVE-2023-45578?
To fix the buffer overflow vulnerability in D-Link devices with CVE-2023-45578, it is recommended to apply the latest firmware update provided by D-Link.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-45578?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-45578 is CWE-119 and CWE-787.
Where can I find more information about CVE-2023-45578?
More information about CVE-2023-45578 can be found at the following reference: https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7xxxx/bug4.md