CVE-2022-43002

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10 B05

Description The issue is related to a stack overflow in the /goform/form2WizardStep54 component of the D-Link DIR-816 A2 router's firmware. This overflow is caused by the wizardstep54 pskpwd parameter. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For D-Link DIR-816 A2 version 1.10 B05, consider restricting access to the /goform/form2WizardStep54 endpoint and avoid using the wizardstep54 pskpwd parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.