CVE-2023-51626
Published: 03 May 2024
Summary
CVE-2023-51626 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Dlink Dcs-8300Lhv2 Firmware. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 9.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-51626 is a stack-based buffer overflow vulnerability in the RTSP server component of D-Link DCS-8300LHV2 IP cameras. The flaw lies in the ValidateAuthorizationHeader function, which fails to validate the length of user-supplied data in the Authorization header before copying it into a fixed-length stack buffer. The RTSP service listens on TCP port 554, and the issue is tracked as ZDI-CAN-21320 with an associated CVSS score of 8.8.
Network-adjacent attackers can exploit the vulnerability without authentication by sending a crafted Authorization header to the RTSP endpoint. Successful exploitation grants the ability to execute arbitrary code with root privileges on the affected camera.
D-Link has published mitigation guidance in security announcement SAP10370, and additional technical details are available in the Zero Day Initiative advisory ZDI-24-046. The EPSS score remains at a modest 0.0528 with no material increase observed since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-56338
Vulnerability details
D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw…
more
exists within the handling of the Authorization header by the RTSP server, which listens on TCP port 554. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21320.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.