Cyber Resilience

CVE-2022-46475

CriticalPublic PoC

Published: 17 January 2023

Published
17 January 2023
Modified
03 April 2025
KEV Added
Patch
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0119 79.3th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-46475 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in Dlink Dir-645 Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 20.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

Deeper analysis

D-Link DIR-645 A1 running firmware version 1.06B01_Beta01 contains a stack-based buffer overflow in the genacgi_main function triggered by an unsanitized service= parameter. The flaw is tracked as CVE-2022-46475 and carries a CVSS 3.1 base score of 9.8 reflecting network-accessible, unauthenticated exploitation that can result in arbitrary code execution or denial of service.

An unauthenticated remote attacker can supply a crafted HTTP request containing an oversized service value to the device’s CGI endpoint, overwriting the stack and gaining control of the router’s execution flow. Successful exploitation grants the attacker the same privileges as the web-server process, typically enabling full device compromise without any user interaction.

EPSS for the vulnerability rose from a low baseline to a peak of 0.1108 on 2025-12-11 before receding to the current value of 0.0119, indicating a period of increased exploitation interest after public disclosure.

EU & UK References

Vulnerability details

D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

dlink
dir-645 firmware
1.06b01_beta01

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-787

Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.

References