CVE-2025-4843: D-Link DCS-932L udev SubUPnPCSInit stack-based overflow
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the argument CameraName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4843?
CVE-2025-4843 is classified as critical due to its potential for remote exploitation via a stack-based buffer overflow.
How do I fix CVE-2025-4843?
To fix CVE-2025-4843, update the firmware of the D-Link DCS-932L to the latest version provided by the manufacturer.
What systems are affected by CVE-2025-4843?
The vulnerability CVE-2025-4843 specifically affects the D-Link DCS-932L camera running version 2.18.01.
Can CVE-2025-4843 be exploited remotely?
Yes, CVE-2025-4843 can be exploited remotely, allowing attackers to initiate an attack without physical access.
What type of vulnerability is CVE-2025-4843?
CVE-2025-4843 is a stack-based buffer overflow vulnerability affecting the SubUPnPCSInit function.