ZDI-CAN-16144: D-Link DIR-1935 SetStaticRouteIPv4Settings NetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of SetStaticRouteIPv4Settings requests to the web management portal. When parsing the NetMask element, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-16144?
ZDI-CAN-16144 is classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix ZDI-CAN-16144?
To mitigate ZDI-CAN-16144, update the D-Link DIR-1935 router firmware to the latest version provided by the manufacturer.
Who is affected by ZDI-CAN-16144?
ZDI-CAN-16144 affects installations of D-Link DIR-1935 routers that have specific firmware versions vulnerable to the flaw.
What impact does ZDI-CAN-16144 have on network security?
ZDI-CAN-16144 allows attackers to execute arbitrary code, which can compromise the security of the router and any connected devices.
Is authentication necessary to exploit ZDI-CAN-16144?
Yes, authentication is required to exploit ZDI-CAN-16144; however, the existing authentication mechanism can be bypassed.