CVE-2023-35744
Published: 03 May 2024
Summary
CVE-2023-35744 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Dlink Dap-2622 Firmware. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 8.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-35744 is a stack-based buffer overflow vulnerability in the DDP service of D-Link DAP-2622 routers, specifically within the Configuration Restore Server handling of IPv6 addresses. The flaw stems from insufficient validation of the length of user-supplied data before it is copied into a fixed-length stack buffer, and it was originally reported as ZDI-CAN-20071. It carries a CVSS score of 8.8 and is also associated with CWE-121 and CWE-787.
Network-adjacent attackers can exploit the issue without authentication to achieve arbitrary code execution with root privileges on affected devices. The EPSS score has remained flat at 0.0756 with no material increase since disclosure. D-Link has published mitigation guidance in security announcement SAP10349, and additional technical details are available in Zero Day Initiative advisory ZDI-23-1249.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-39743
Vulnerability details
D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The…
more
specific flaw exists within the DDP service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-20071.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.