CVE-2022-46475
Published: 17 January 2023
Summary
CVE-2022-46475 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in Dlink Dir-645 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 20.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
D-Link DIR-645 A1 running firmware version 1.06B01_Beta01 contains a stack-based buffer overflow in the genacgi_main function triggered by an unsanitized service= parameter. The flaw is tracked as CVE-2022-46475 and carries a CVSS 3.1 base score of 9.8 reflecting network-accessible, unauthenticated exploitation that can result in arbitrary code execution or denial of service.
An unauthenticated remote attacker can supply a crafted HTTP request containing an oversized service value to the device’s CGI endpoint, overwriting the stack and gaining control of the router’s execution flow. Successful exploitation grants the attacker the same privileges as the web-server process, typically enabling full device compromise without any user interaction.
EPSS for the vulnerability rose from a low baseline to a peak of 0.1108 on 2025-12-11 before receding to the current value of 0.0119, indicating a period of increased exploitation interest after public disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-49279
Vulnerability details
D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.