CVE-2023-45580: Buffer Overflow
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the wild/mx and other parameters of the ddns.asp function
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45580?
The severity of CVE-2023-45580 is critical with a score of 9.8.
Which D-Link devices are affected by CVE-2023-45580?
The D-Link devices affected by CVE-2023-45580 are DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1.
What is a buffer overflow vulnerability?
A buffer overflow vulnerability occurs when a program tries to store more data in a buffer than it can handle, leading to the overwriting of adjacent memory.
How can the buffer overflow vulnerability in D-Link devices be exploited?
The buffer overflow vulnerability in D-Link devices can be exploited by an attacker sending specially crafted data to the affected device, potentially allowing them to execute arbitrary code or gain unauthorized access.
How can I mitigate the buffer overflow vulnerability in D-Link devices?
To mitigate the buffer overflow vulnerability in D-Link devices, it is recommended to update the firmware to a version that includes a fix for the vulnerability.