ZDI-CAN-21322: ZDI-24-048: D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the SetHostName ONVIF call. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 8.0. The following CVEs are assigned: CVE-2023-51628.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-21322?
ZDI-CAN-21322 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix ZDI-CAN-21322?
To mitigate ZDI-CAN-21322, apply the latest firmware updates provided by D-Link for the DCS-8300LHV2 IP cameras.
What type of attackers can exploit ZDI-CAN-21322?
ZDI-CAN-21322 can be exploited by network-adjacent attackers who are able to bypass the authentication mechanism.
What is impacted by ZDI-CAN-21322?
ZDI-CAN-21322 affects D-Link DCS-8300LHV2 IP cameras specifically.
Is authentication required to exploit ZDI-CAN-21322?
Yes, authentication is required to exploit ZDI-CAN-21322, but it can be bypassed due to the existing vulnerabilities.