Pedro Tavares

Researcher fromArt Resilia

#24063of 60,401

12.1Total CVSS

Vulnerabilities · 2

Low

1

Critical

1

The issue is related to a buffer overflow in the jsonrpc service of the D-Link DIR-825 router's firmware, which can be exploited by an attacker to execute arbitrary code or cause a denial of service. This can be achieved via the GetConfig method to the "/CPE" endpoint.

The issue allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard, specifically exploiting the QuickType feature in the Keyboards subsystem.