CVE-2023-43236

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10CNB05

Description The issue is related to a stack overflow in the dir setWanWifi function, which can be triggered via the statuscheckpppoeuser parameter. This can potentially allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For D-Link DIR-816 A2 version 1.10CNB05, as a temporary workaround, consider disabling the dir setWanWifi function until a patch is available. Restrict access to the statuscheckpppoeuser parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.