PT-2022-5273 · D Link · D-Link Dir-816 A2

·

CVE-2022-43003

·

Published

2022-10-26

·

Updated

2022-10-28

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10 B05
Description The issue is related to a buffer overflow in the setRepeaterSecurity function of the D-Link DIR-816 A2 router's firmware. This can be exploited by a remote attacker using the pskValue parameter to execute arbitrary code.
Recommendations For version 1.10 B05, consider restricting access to the setRepeaterSecurity function until a patch is available. As a temporary workaround, avoid using the pskValue parameter in the affected function to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2022-06557
CVE-2022-43003

Affected Products

D-Link Dir-816 A2