PT-2026-99926 · D Link · Di-8400
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
D-Link DI-8400 version 16.07
Description
A flaw in the Web Administration Service allows for a remote stack-based buffer overflow. This occurs when the
opt argument is manipulated within the menu nat more asp() function of the menu nat more.asp file. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, restrict access to the Web Administration Service to minimize the risk of exploitation.
Exploit
Buffer Overflow
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Di-8400